When you upgrade from N4 3.6 or lower, the old passwords which had used MD5 encryption are still available in case you decide to revert to the previous version.
If you have successfully upgraded and the fallback period is over, you should nullify the old MD5-encrypted passwords using the NullifyPasswordBackup code extension.
If you do not nullify the old passwords, your system security will be at risk.
To nullify the old MD5 passwords in the database table:
In N4, choose Administration System
Groovy Jobs.
In the Groovy Jobs view, click Add icon to add a Groovy job.
Fill in the job information:
Id: Enter a unique ID for the Groovy job (example: NullifyPasswordBackup).
Description: Enter a short description.
Groovy Job Type: Select Code Extension.
Under the Job Target, double-click the NullifyPasswordBackup code extension in the Excluded area so it moves to the Included area.
Choose the Scheduling tab and set the schedule.
Click Save.
N4 will run the NullifyPasswordBackup code extension job as per the schedule that you specified to nullify the old passwords in the database table.