Forum Discussion

sandy16's avatar
sandy16
Icon for Altostratus rankAltostratus
Feb 13, 2013

disabling the admin and root accounts.

Hi, we are on ver 11.2 and we have a PCI audit requirement to disable the local admin account on our network devices wherever we can. We only want to use remote LDAP authentication. Is there a way t...
management
monitoring
nitass's avatar
nitass
Icon for Employee rankEmployee
Feb 14, 2013
i do not see a way to disable "admin" account but for "root" account, you can use SystemAuth.DisableRootLogin db key.

 

 

[root@ve11a:Active:Changes Pending] config tmsh list sys db systemauth.disablerootlogin one-line

 

sys db systemauth.disablerootlogin { value "false" }

 

 

10 Settings to Lock Down your BIG-IP by David

 

https://devcentral.f5.com/blogs/us/10-settings-to-lock-down-your-big-ip