Ensure the default administrator password has been changed

Méthode de vérification

Méthode d'audit: Revue manuelle

Cette recommandation ne peut pas être vérifiée automatiquement. Une analyse la liste avec ces instructions lorsque vous passez --include-manual.

In the Embedded Web Server (EWS: browse to https://<printer-ip>/ and sign in as administrator; HP: Security / Networking tabs, Xerox: Properties > Security / Connectivity, Ricoh: Device Management > Configuration, Canon: Settings/Registration > Network Settings / Security Settings): confirm an administrator password is set and differs from the vendor default (try the documented default, e.g. blank, 'admin', '1111', 'x-admin' or the serial number, and expect it to be rejected). Also check the control-panel/service PIN and the SNMP write community. Confirm the password is unique per device and stored in the password vault; prefer LDAP/Kerberos-backed admin accounts where supported.

Méthode de correction

Méthode de correction: Recommandation ou correctif d'infrastructure

EWS: Security > General Security / Account management > set a unique, strong (15+ chars) administrator password; change the device service/control-panel PIN; restrict admin sign-in to directory-backed accounts where supported. Fleet: push via the vendor fleet tool (HP Web Jetadmin / Security Manager, Xerox CentreWare, Ricoh Streamline NX).