Changing or resetting your Fermi domain or Services password

Intended for:

Individuals who need to change or reset their Fermi domain (Windows login) or Services account passwords (regular or -admin). We recommend using the Password Reset Tool. Once enrolled, you can use the Password Reset Tool any time of day without staff intervention.

BEFORE YOU BEGIN: You must have one of the following to use the Password Reset tool:

• RSA token or YubiKey
• CILogon certificate
• Kerberos ticket

 If you do not have any of these, you must either contact the Service Desk to change your password. If you are using a Mac or Linux computer, you can change your Services password after the password is expired using the "kpasswd" command. Follow the instructions in this article.

Scenario/Use case:

Change or reset their Fermi domain (Windows login) or Services account passwords.

Details:

• What Operating System are you using?
  
  
  1. Windows in Fermi domain (usually true if you have a Fermilab-owned computer)
     
     
     1. If you know your password, use CTRL-ALT-DELETE or the Password Reset Tool.
     2. If you don’t know your password or password expired, use the Password Reset Tool (requires a RSA, YubiKey, CILogon certificate or Kerberos ticket).
     3. If you don’t have any of these and either you don’t know your password or your password is expired, you must contact the Service Desk.
        
        
  2. Windows Not in Fermi domain (usually true if you have a personally owned computer)
     
     
     1. Use the Password Reset Tool (requires a RSA, YubiKey, CILogon certificate or Kerberos ticket).
     2. If you don’t have any of these and either you don’t know your password or your password is expired, you must contact the Service Desk.
        
        
  3. Mac with Fermilab Kerberos
     
     
     1. If you know your password and/or if your password has expired, use kpasswd.
     2. If you don’t know your password, use the Password Reset Tool. (requires a RSA, YubiKey, CILogon certificate or Kerberos ticket).
     3. If you don’t haveany of these and you don’t know your password, you must contact the Service Desk.
        
        
  4. Mac without Fermi Kerberos
     
     
     1. Use the Password Reset Tool (requires a RSA, YubiKey, CILogon certificate or Kerberos ticket).
     2. If you don’t have any of these, you must contact the Service Desk.
        
        
  5. Linux, with Fermilab Kerberos
     
     
     1. If you know your password and/or if your password has expired, use kpasswd.
     2. If you don’t know your password, use the Password Reset Tool (requires a RSA, YubiKey, CILogon certificate or Kerberos ticket).
     3. If you don’t have any of these, and you don’t know your password, you must contact the Service Desk.
        
        
  6. Linux, not with Fermi Kerberos
     
     
     1. Use the Password Reset Tool (requires a RSA, YubiKey, CILogon certificate or Kerberos ticket).
     2. If you don’t have any of these, you must contact the Service Desk.
        
        
• Are you using a handheld device?
                      i. Use the Password Reset Tool ( requires a RSA, YubiKey, CILogon certificate or Kerberos ticket).                       ii. If you don’t have any of these, you must contact the Service Desk.
  
  • 
    

If you cannot proceed, contact the Service Desk at 630-840-2345 or servicedesk@fnal.gov (email will take longer to respond)