Our vulnerability scanner is complaining we have the pma phpMyAdmin user set with an empty password. 

This is a Windows server. Where can I find config.inc.php file so that I can set a password for the pma account? 

Also, does anyone know if setting a password there would mean I would need to update the account elsewhere?