Description of the illustration password_rollover_cycle.png

Graphic password_rollover_cycle.png shows the following elements, from top to bottom, left to right:

• Phase 1: Represents the last password change, and the password lifetime. It has two sub-phases, 1a and 1b. Phase 1a begins with the password change. During Phase 1a, the user can log in using either the old password or the new password. Phase 1b corresponds to the time remaining after the password rollover period expires. During Phase 1b, the user can log in using only the new password.

• Phase 2: Represents the period of time during which the user does not try to make any authentication attempts.

• Phase 3: Represents the first login after the password lifetime has expired. This begins the grace period.

• Phase 4: Represents the period of time after the expiration ends.