PCI DSS Req 2.3 | Non-Console Administrative Access

[utknuclear]

2.3 Encrypt all non-console administrative access. Use technologies
such as SSH, VPN, or SSL/TLS for webbased management and other non-console administrative access.


Can somebody give me a better understanding of what "non-console" administrative access means? Thanks,

[mikekatz]

Non-console adminsitrative access means using something like Remote Desktop or VNC to remotely administer a Windows machine - in other words, you are not at the keyboard of the machine that you are administering. For Unix, this can mean VNC or SSH.