---
title: Second Password Expiration Configuration
slug: kronpam-legacy-ui-reference-guide-3-5-0/second-password-expiration-configuration
description: Learn how to set the Second Password expiration parameter in the System Config Manager to enhance security. This document provides step-by-step instructions for adding the aioc.second.password.ttl parameter and specifying a value in days. Discover how to 
docTags: 
createdAt: 2022-08-01T17:11:08.000Z
---

The Second Password expiration parameter should be defined in the System Config Manager. The TTL day parameter defines the maximum use time allowed for the Second Password.

1. Navigate to** Administration** > **System Config Man**.
2. Add the **aioc.second.password.ttl** parameter with a value (in days).

:::hint{type="info"}
If this value is set to "-1" and “0”, the SSH Key will never expire. The TTL value can be set between -1 and 10000.
:::