You are here: Introduction > Admin Permissions in the Intel AMT Device > Default Admin User (Digest)

# Default Admin User (Digest)

Each Intel AMT device contains a predefined administrative user named “admin”, referred to in this guide as the default admin user. Intel AMT uses the HTTP Digest authentication method to authenticate the default admin user.

The default admin user:

- Has access to all the Intel AMT features and settings on the device
- Is not contained in the Access Control List with other Digest users, and cannot be deleted

Thus, for security reasons it is important how you define the password for this user (even if you do not use it). The password is defined in the Network Settings section of the configuration profile (see Defining System Settings).

These are the methods for defining the password of the default admin user:

Defined Passwords

This method is the easiest method to use and has no prerequisites. But, the password you define in the profile is set in all devices configured with this profile. If the password is discovered, all the devices can be accessed. If you use this method, define a very strong password. To increase security, you can also configure systems with profiles containing different passwords.

Random Passwords

Intel SCS generates a different (random) password for each device. The passwords are not saved. Because the password is not known to you or any application, after configuration you will not be able to connect to the device using the default admin user. Thus, you can only select the random passwords option if the profile contains a Kerberos admin user. For more information, see User-Defined Admin User (Kerberos).