Frequently Asked Question

PCI Requirement 2 - Apply Secure Configurations to All System Components 

2.2.2 - Vendor default accounts are managed by performing the following actions.

Any Default accounts, such as and not limited to; Admin, Administrator, Users, Root should be handled by;

• Disabling or Removing default accounts, but if a default account is required or not possible to remove the account, the use of a very strong password and limited knowledge of the password is recommended.