Password requirements for SERVICES account, Kerberos password, and Windows FERMI domain password
Intended for:
Users who have a SERVICES domain account (aka "Services account), a Kerberos account, or a Windows login account
Scenario/Use case:
Learn what the password requirements are for SERVICES domain account (aka "Services account"), Kerberos password, and FERMI domain (Windows login) password.
Details:
Password Requirements
"SERVICES Account" password
- Minimum of 10 characters.
- Three of the four character groups must be used. These groups include:
- English uppercase characters (A through Z).
- English lowercase characters (a through z).
- Base 10 digits (0 through 9).
- Non-alphabetic characters (For example: ! @ # $ ^ & * % - . , ).
Note: You cannot use quotes, brackets or parenthesis, because the self-service web form does not support them.
- This password cannot contain three or more characters from your user name.
- This password cannot contain your username or real name.
- This password cannot contain any spaces.
- You cannot repeat your last 8 passwords.
- This password should be different from your Fermi Windows domain or Kerberos passwords.
- This password expires every 6 months.
- This password has a minimum lifetime of 48 hours between password changes.
- Minimum lifetime is ignored if the "User must change password at next login" flag is set by Service Desk doing a password reset.
- Minimum lifetime is ignored if the "User must change password at next login" flag is set by Service Desk doing a password reset.
Kerberos password
- Minimum of 10 characters.
- Two of the four character groups must be used. These groups include:
- English uppercase characters (A through Z).
- English lowercase characters (a through z).
- Base 10 digits (0 through 9).
- Non-alphabetic characters (For example ! @ # $ ^ & * % - . , ).
- This password can be the same as your Fermi Windows domain password.
- This password expires every 400 days.
- You cannot repeat your last 8 passwords.
- This password has no minimum lifetime between password changes.
Windows Fermi Domain password
- Minimum of 10 characters.
- Minimum of three of the five character groups must be included:
- English uppercase characters (A through Z).
- English lowercase characters (a through z).
- Base 10 digits (0 through 9).
- Non-alphanumeric characters (For example: !, $, #, or %).
- Unicode characters.
- This password cannot contain three or more characters from the user's real name.
Several characters (commas, periods, dashes/hyphens, underscores, spaces, pound-signs and tabs) are treated as delimiters that separate a real name into individual tokens. Each block of three or more characters is treated as a token. For example, the name "Erin M. Hagens" is split into three tokens: "Erin," "M," and "Hagens." Because the second token is only one character long, it is ignored. Therefore, this user cannot have a password that includes either "erin" or "hagens". - This password cannot contain any spaces.
- You cannot repeat your last 8 passwords.
- This password can be the same as your Kerberos password.
- This password expires every 6 months.
- This password has a minimum lifetime of 48 hours between password changes.
- Minimum lifetime is ignored if the "User must change password at next login" flag is set by Service Desk doing a password reset.