Configuring RPC on Check-in
Procedure
To configure password checking on check in, navigate to the Remote Password Changing Administration page and set Enable Password Changing on Check In. If RPC is turned off, enable it before configuring checkout. Once RPC and checkout are enabled, secrets can be configured for interval that specifies how long a user has exclusive secret access. The configuration of the secret is not impacted by the global level. If the secret did not have any Check-out / Check-in setup, nothing will change if you allow password change in RPC on check-in.
Manual Password Change for Checked Out Secrets
Secrets with "Change Password on Check-in" enabled have "Change Password Now" functionality. This enables the standard password-change, and the secret also completes the automatic password change on checking in. This allows for maintenance and testing of secrets protected in this manner, and a pending password change must be completed before check-in is allowed to maintain a secure order of operations.
The functionality appears as a Change Password Now button on the secret: