Changing or resetting your Fermi domain or Services password

Intended for:

Individuals who need to change or reset their Fermi domain (Windows login) or Services account passwords (regular or -admin). We recommend using the Password Reset Tool. Once enrolled, you can use the Password Reset Tool any time of day without staff intervention.

BEFORE YOU BEGIN: You must have a Fermilab-issued RSA token or YubiKey to use the Password Reset tool. If you do not have either of these, you must either contact the Service Desk to change your password, or use the use the “kpasswd” command (for Services accounts on Mac or Linux only--see next paragraph)

If you are using a Mac or Linux computer, you can change your Services password after the password is expired using the "kpasswd" command. Follow the instructions in this article.

Scenario/Use case:

Change or reset their Fermi domain (Windows login) or Services account passwords.

Details:

• What Operating System are you using?
  
  
  
  1. Windows in Fermi domain (usually true if you have a Fermilab-owned computer)
     
     1. If you know your password, use CTRL-ALT-DELETE or the Password Reset Tool.
     2. If you don’t know your password or password expired, use the Password Reset Tool (requires a Fermilab-issued RSA token or YubiKey).
     3. If you don’t have an RSA token or YubiKey, and either you don’t know your password or your password is expired, you must contact the Service Desk.
  2. Windows Not in Fermi domain (usually true if you have a personally owned computer)
     
     1. Use the Password Reset Tool (requires a Fermilab-issued RSA token or YubiKey).
     2. If you don’t have an RSA token or YubiKey, and either you don’t know your password or your password is expired, you must contact the Service Desk.
  3. Mac with Fermilab Kerberos
     
     1. If you know your password and/or if your password has expired, use kpasswd.
     2. If you don’t know your password, use the Password Reset Tool. (requires a Fermilab-issued RSA token or YubiKey).
     3. If you don’t have an RSA token or YubiKey, and you don’t know your password, you must contact the Service Desk.
  4. Mac without Fermi Kerberos
     
     1. Use the Password Reset Tool (requires a Fermilab-issued RSA token or YubiKey).
     2. If you don’t have an RSA token or YubiKey, you must contact the Service Desk.
  5. Linux with Fermilab Kerberos
     
     1. If you know your password and/or if your password has expired, use kpasswd.
     2. If you don’t know your password, use the Password Reset Tool (requires a Fermilab-issued RSA token or YubiKey).
     3. If you don’t have an RSA token or YubiKey, and you don’t know your password, you must contact the Service Desk.
  6. Linux not with Fermi Kerberos
     
     1. Use the Password Reset Tool (requires a Fermilab-issued RSA token or YubiKey).
     2. If you don’t have an RSA token or YubiKey, you must contact the Service Desk.
• Are you using a handheld device?
  
  1. 
     
     1. Use the Password Reset Tool (requires a Fermilab-issued RSA token or YubiKey).
     2. If you don’t have an RSA token or YubiKey, you must contact the Service Desk.

If you cannot proceed, contact the Service Desk at 630-840-2345 or servicedesk@fnal.gov (email will take longer to respond)