A formal registration process shall be established for all users who require remote diagnostic and configuration port access. Users should be given the minimum access rights to complete the diagnostic and configuration tasks and shall be authenticated.