Ensure the default administrator password has been changed

Cómo se verifica

Método de auditoría: Revisión manual

Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.

In the Embedded Web Server (EWS: browse to https://<printer-ip>/ and sign in as administrator; HP: Security / Networking tabs, Xerox: Properties > Security / Connectivity, Ricoh: Device Management > Configuration, Canon: Settings/Registration > Network Settings / Security Settings): confirm an administrator password is set and differs from the vendor default (try the documented default, e.g. blank, 'admin', '1111', 'x-admin' or the serial number, and expect it to be rejected). Also check the control-panel/service PIN and the SNMP write community. Confirm the password is unique per device and stored in the password vault; prefer LDAP/Kerberos-backed admin accounts where supported.

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

EWS: Security > General Security / Account management > set a unique, strong (15+ chars) administrator password; change the device service/control-panel PIN; restrict admin sign-in to directory-backed accounts where supported. Fleet: push via the vendor fleet tool (HP Web Jetadmin / Security Manager, Xerox CentreWare, Ricoh Streamline NX).