Disabling the admin account

Information

Beginning in BIG-IP 11.6.0, it is possible to disable and replace the admin and root accounts with alternative logins using the Configuration utility or TMOS Shell (tmsh).

Solution

Before you disable the admin login, you must also create a new administrative user account. To accomplish both tasks, perform the following procedure:
1. Log in to the Configuration utility as the administrative user.
2. Navigate to System > Users.
3. To create a new user, click .
4. Enter a username, password, and user role of Administrator.
5. Click Finished.
6. Navigate to System > Platform.
7. Under the Admin Account section, select the Disable default admin, use alternate check box.
Note: If you have not created an alternate administrative account, this option will not appear.
8.From the menu that appears, select the newly created administrator role user account.
9. Enter the new password for the selected user.
10. Click Update.

See Also

https://support.f5.com/csp/article/K53108777#link_01

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-2f.

Plugin: F5

Control ID: ea124fc0256b285b5c78c2f6bcc52ae5cb17cfa941d4a0ca05049f2b4ce8bd81