There is a couple of places in the Web UI where you can define a root password (creating a hostgroup or a new host, for example). However, since you can't see the root password, and there is only one password entry definition box, there is no real way to verify that the password that is typed in the box is what I intend the password to be. It would be very beneficial if we would have to type the password twice to make sure that it ends up being what we intend it to be.