Password requirements for SERVICES account, Kerberos password, and Windows FERMI domain password

Intended for:

Users who have a SERVICES domain account (aka "Services account), a Kerberos account, or a Windows login account

Scenario/Use case:

Learn what the password requirements are for SERVICES domain account (aka "Services account"), Kerberos password, and FERMI domain (Windows login) password.

Details:

Password Requirements

"SERVICES Account" password

• Minimum of 10 characters.
• Three of the four character groups must be used. These groups include:
  
  • English uppercase characters (A through Z).
  • English lowercase characters (a through z).
  • Base 10 digits (0 through 9).
  • Non-alphabetic characters (For example: ! @ # $ ^ & * % - . , ).
    Note: You cannot use quotes, brackets or parenthesis, because the self-service web form does not support them.
• This password cannot contain three or more characters from your user name.
• This password cannot contain your username or real name.
• This password cannot contain any spaces.
• You cannot repeat your last 8 passwords.
• This password should be different from your Fermi Windows domain or Kerberos passwords.
• This password expires every 6 months.
• This password has a minimum lifetime of 48 hours between password changes.
  
  • Minimum lifetime is ignored if the "User must change password at next login" flag is set by Service Desk doing a password reset.
    
    

Kerberos password

• Minimum of 10 characters.
• Two of the four character groups must be used. These groups include:
  
  • English uppercase characters (A through Z).
  • English lowercase characters (a through z).
  • Base 10 digits (0 through 9).
  • Non-alphabetic characters (For example ! @ # $ ^ & * % - . , ).
• This password can be the same as your Fermi Windows domain password.
• This password expires every 400 days.
• You cannot repeat your last 8 passwords.
• This password has no minimum lifetime between password changes.
  
  

Windows Fermi Domain password 

• Minimum of 10 characters.
• Minimum of three of the five character groups must be included:
  
  • English uppercase characters (A through Z).
  • English lowercase characters (a through z).
  • Base 10 digits (0 through 9).
  • Non-alphanumeric characters (For example: !, $, #, or %).
  • Unicode characters.
• This password cannot contain three or more characters from the user's real name.
  Several characters (commas, periods, dashes/hyphens, underscores, spaces, pound-signs and tabs) are treated as delimiters that separate a real name into individual tokens. Each block of three or more characters is treated as a token. For example, the name "Erin M. Hagens" is split into three tokens: "Erin," "M," and "Hagens." Because the second token is only one character long, it is ignored. Therefore, this user cannot have a password that includes either "erin" or "hagens".
• This password cannot contain any spaces.
• You cannot repeat your last 8 passwords.
• This password can be the same as your Kerberos password.
• This password expires every 6 months.
• This password has a minimum lifetime of 48 hours between password changes.
  
  • Minimum lifetime is ignored if the "User must change password at next login" flag is set by Service Desk doing a password reset.