What strong password policy. Asterisk has secrets, not passwords, and, to the best of my knowledge, doesn’t strength test them. Maybe this is something to do with FreePBX?
I am pretty sure that is FreePBX, not Asterisk. Can you tell us in which configuration file this appears (several files have parameter with this name)? Can you also provide the Asterisk log message when it rejects the configuration file?
If this only appears on a web interface, it is definitely not Asterisk, as Asterisk has no native web interface.
Incidentally, on a system that is capable of making toll charges, weak device secrets or AMI secrets are an extremely bad idea.