Ensure default password of admin is not used

CriticalLevel 1Manual reviewf5-bigip

Description

To assist users in changing default password for 'admin' account

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

From a management host try to log in to the Configuration utility and SSH as admin with the factory default password 'admin'. The login must be rejected.

How it is fixed

Fix method: Guidance or infrastructure patch

- Log in to the Configuration utility. - For System, select Platform. - Under User Administration, choose the Password box for either Root Account or Admin Account. - Enter the new password. - Enter the same password in the Confirm box for the account that you chose in step 3. - Select Update. - If you have updated the password for Admin Account, the system logs you out of the Configuration utility, and you must log in again using the new password.

Properties

Operating systems: Any
Tags: f5-bigipauthentication
Reference: CIS F5 Networks Benchmark v1.0.0 - 1.1.2 Ensure default password of admin is not used