While logging to Spotfire server configuration tool, one may face an error message stating "The password has expired", as shown in the screenshot below:
 

Unable to login to the Spotfire server configuration tool due to 'ORA-28001: The password has expired' error.

All supported OS versions

This error message "ORA-28001: The password has expired" is an external error which originates from the Oracle server. It appears in those Spotfire environments where the housekeeping database (the Spotfire database) is Oracle-hosted and occurs when the password gets expired for the user connecting with the Spotfire database. In general, the user account being used is 'spotfire_db' user.

The issue can be resolved by resetting the password for the user (that connects to the Spotfire database). If a new password has been set then you can either create a new bootstrap file or use the existing bootstrap and set the new password using the Configuration tool UI.

If you are not concerned with strict security rules for your database, you can set the user accounts on the database side (Oracle) to never expire, by altering the 'PASSWORD_LIFE_TIME' limit to unlimited for the user profile. 

http://www.dbas-oracle.com/2011/06/ora-28001-password-has-expired.html