I'm setting up a server at a new colocation center half way around the world. They installed the OS for me and sent me the root password, so there's obviously a great amount of trust in them.
However, I'm pretty sure I don't want them to have my root password on a regular basis. And anyway, I intend to only allow key-based login.
On some cases, though, it might be useful to let their technical support log in through a physical terminal. For example, if I somehow mess up the firewall settings.
Should I even bother worrying about that?
Should I set up a sudoer account with a one-time password that will change if I ever use it?
Is there a common strategy for handling something like this?
