security/passwordpolicy.cf
<?xml version="1.0" encoding="UTF-8"?>
  <rs>
    <security>
      <passwordpolicy>
        <bsipasswordpolicy>
          <pswd>
            <maxage>32000</maxage>
            <minage>1</minage>
            <minlength>8</minlength>
          </pswd>
          <historysize>6</historysize>
          <lockoutthreshold>3</lockoutthreshold>
          <lockoutresettimeout>60</lockoutresettimeout>
          <characterset>0123456789</characterset>
          <choosemin>1</choosemin>
          <characterset>abcdefghijklmnopqrstuvwxyz</characterset>
          <choosemin>1</choosemin>
          <characterset>ABCDEFGHIJKLMNOPQRSTUVWXYZ</characterset>
          <choosemin>1</choosemin>
  	      <characterset>!$%&;/=?*:.;,-\_+~#@</characterset>
          <choosemin>1</choosemin>
        </bsipasswordpolicy>
      </passwordpolicy>
    </security>
</rs>