Content Encryption/Passwords

[saclifford]

We currently enforce a 5 digit password on our BES and are about to add content protection.

I noticed a note in the BES 4.1 Policy Guide that says "if you cofigure [sic] this rule to Strong or Stronger, configure the Minimum Password Length IT policy rule to 12 characters." Is that a suggested best practice or a requirement? If I choose Strong or Stronger to I have to change my password length policy or can I leave it at 5 and just have the encryption be less effective than it could be, yet functional?

Our BES is v4.1.6.9.; we'll be moving to 5 in the near future.

Thanks!