STIGQter: STIG Summary: Rancher Government Solutions Multi-Cluster Manager Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 05 Jan 2026:

Rancher MCM must never automatically remove or disable emergency accounts.

DISA Rule

SV-252847r971528_rule

Vulnerability Number

V-252847

Group Title

SRG-APP-000234-CTR-000590

Rule Version

CNTR-RM-000850

Severity

CAT II

CCI(s)

• CCI-001682 - Automatically removes or disables emergency accounts after an organization-defined time period for each type of account.

Weight

10

Fix Recommendation

Ensure local emergency admin account has not been removed and is the only Local account.

Navigate to the Triple Bar Symbol(Global) >> Users & Authentication. In the left navigation menu, click "Users".

To Create a User:
-Click "Create".
-Complete the "Add User" form. Ensure Global Permissions are set to "Administrator".
-Click "Create".

To Delete a User:
-Select the user and click "Delete".

Check Contents

Ensure local emergency admin account has not been removed and is the only Local account.

Navigate to the Triple Bar Symbol(Global) >> Users & Authentication. In the left navigation menu, click "Users".

There should be only one local account and that account should have administrator role.

If no local administrator account exists or there is more than one local account, this is a finding.

Vulnerability Number

V-252847

Documentable

False

Rule Version

CNTR-RM-000850

Severity Override Guidance

Ensure local emergency admin account has not been removed and is the only Local account.

Navigate to the Triple Bar Symbol(Global) >> Users & Authentication. In the left navigation menu, click "Users".

There should be only one local account and that account should have administrator role.

If no local administrator account exists or there is more than one local account, this is a finding.

Check Content Reference

M

Target Key

5467