Procedure

1. On the left navigation pane, click Device Management → Security Policies.
   The Security Policies screen appears.
2. Add or edit a policy:
   • For new policies, click Add.
   • For preexisting policies, click the Policy Name hyperlink.
   The Security Policies: Add/Edit Policy screen appears.
3. Type a name and optionally provide a description for the policy.
4. In the Apply to Accounts section, select the Active Directory accounts to which ScanMail Mobile associates the policy.
5. In the Security Criteria section, configure the following settings as required:
   • Minimum password length: Requires users to use passwords that are a minimum number of characters as specified by the administrator
   • Require password complexity: Requires users to include a minimum complexity requirement for device passwords, based on device type and operating system
     For details on the complexity requirements for specific operating systems, see Password Complexity Requirements.
   • Lock device after inactivity: Specify the amount of time ScanMail Mobile allows a device to remain inactive before automatically locking the device

     Note To unlock the device, users must type the correct password.

   • Require encryption on device: Select to enforce Exchange encryption on the device
   • Wipe device after unsuccessful sign-in: Specify the number of sign-in attempts allowed before ScanMail Mobile wipes all data from the device storage

     WARNING Configuring a low number may result in accidental data loss. Trend Micro recommends using caution when determining whether to perform an automatic wipe of data.

6. Click Save.