How to change your Services account or Fermi domain password using Password Reset Tool

Intended for:

Users who need to change their Services account password or FERMI domain (Windows login) password using the Password Reset Tool.

Scenario/Use case:

This article describes how to use the Password Reset Tool to change your Services account password or FERMI domain (Windows login) password.

 You must have a Fermilab-issued RSA token or YubiKey to use the Password Reset tool. If you do not have either of these, you must either contact the Service Desk to change your password, or use the use the “kpassword” command (for Services accounts on Mac or Linux only--see next paragraph)

If you are using a Mac or Linux computer, you can change your Services password after the password is expired using the "kpasswd" command. Follow the instructions in this article.

Instructions:

BEFORE YOU BEGIN:

1. You must have an RSA token or YubiKey to use the tool. You can obtain an RSA token by following these instructions; YubiKeys are reserved for employees who have access to the lab’s business or financial systems.

2. You must first enroll each account in the Password Reset Tool. Once enrolled, you do not need to repeat this step.

Once you have completed these steps, you can access the Password Reset Tool.

Changing your Services account password

1. Log in to the Password Reset Tool [https://passwordreset.fnal.gov] using your RSA token or Yubikey

Logging in with RSA token

1. Select RSASecureID from the pulldown menu:

2. Enter your RSA passcode and click Submit button.
   
   

Logging in with YubiKey

1. Select YubiKey from the pulldown menu.
   
   
   
   You will next be prompted to select a certificate:
   
   
   b. Select the certificate and click OK.

c. Enter your YubiKey pin and click OK button.

2. Select SERVICES from the Log on to dropdown list. Enter your Services account user name and password to log in.

 
If the password you entered is incorrect, you will get the error message "Invalid LoginName/Password. Please try again."

3. After you sign in, you can change your password accordingly.

NOTE: If you are using a Mac or Linux computer, you can also change your SERVICES password using the "kpasswd" command in a terminal window:

% kpasswd username@SERVICES.FNAL.GOV

Password for username@SERVICES.FNAL.GOV: <--- type your current SERVICES password here 

Enter new password: <--- type your new password here 
Enter it again: <--- type your new password here for confirmation 
Password changed.

Changing your FERMI domain (Windows login) password 

1. Log in to the Password Reset Tool at https://passwordreset.fnal.gov using your RSA Token or YubiKey.

2. Select FERMI from the Log on to dropdown list. Enter your FERMI Windows domain user name and password to log in.

 

If the password you entered is incorrect, you will get the error message "Invalid LoginName/Password. Please try again."

3. After you sign in, you can change your password accordingly.

NOTE: If you cannot change your password using this tool, please call the Service Desk at (630) 840-2345 or email servicedesk@fnal.gov for assistance (email response may be as long as 8 hours, during business hours only).

See Also:

• How to use the Password Manager Tool
• How to change or reset your Fermilab passwords