Secure password policy for the BIG-IP system (11.x)

For PCI, just set it to something ridiculously long and lock those in a vault. Then never use them, except under emergency situations. You can use a remote directory (AD/Radius) and force compliance with those policies. There's no reason for users to ever log in as admin or root unless you loose access to your remote directory. PCI is all about mitigating controls.