Tim Schindler Thanks for your reply. I did the same with password and in fact generated >100 characters passwords as well as passphrases. However, none of those helped. I think it might be a bug.

Now I have the solution. In v4.70 the security regulations are changed. After creating a SO user, the SO user password needs to be changed before the SO user can set a normal user PIN.