As an administrator, you can:
Create one or more passphrase questions for users to select.
Enable users to create their own passphrase question and answer.
Set up a combination of both.
To create a passphrase question:
Launch the Administrative Management utility (iManager, SLManager, or MMC snap-ins).
Click Advanced Setting. The advanced setting options are deployed.
By default, User-defined passphrase questions is selected. Deselect this option if you do not want users to create their own passphrase question and answer.
Click New.
In the Enter a new passphrase question dialog box, provide your passphrase question.
Click OK. The question you provided is displayed in the Corporate passphrase questions field.
This passphrase question is displayed to all users associated with the selected object.
Repeat the Steps 3 to Step 5 to create additional passphrases.
IMPORTANT:Make sure you click OK after you have created the passphrase question to save the changes and exit the page.
The passphrase answer is specified by the user when he or she sets up the passphrase question and answer. Ideally, passphrase answers must contain a minimum of six characters. However, you can change the policy to suit your security requirement. For more information, see Changing a Passphrase Policy.
We recommend that you do not apply strict policies to passphrase answers as it make them harder to remember. Instead, we recommend you to use a multivalue question, such as What is you driving license number plus Your Mother’s name? and set a passphrase policy based on that.