This parameter specifies the lockout reset time (the interval after which a locked subscriber account is automatically unlocked) for a host lockout policy applied to a subscriber. After a subscriber account is locked due to failed authentication attempts, this timer determines when automatic recovery is allowed. Operators configure this value to balance security (longer lockout prevents brute-force attacks) against availability (shorter lockout reduces support burden for legitimately locked users).