How to change your SERVICES domain account (aka "Services account") or FERMI domain password using Password Reset Tool
Intended for:
Users who need to change their SERVICES domain account (aka "Services account") password or FERMI domain (Windows login) password using the Password Reset Tool.
Scenario/Use case:
This article describes how to use the Password Reset Tool to change your SERVICES domain account (aka "Services account") password or FERMI domain (Windows login) password.
You must have one of the following to use the Password Reset tool:
- RSA token or YubiKey
- CILogon certificate
- Kerberos ticket
If you do not have any of these, you must contact the Service Desk to change your password.
If you are using a Mac or Linux computer, you can change your Services password after the password is expired using the "kpasswd" command. Follow the instructions in this article.
Instructions:
BEFORE YOU BEGIN:
1. You must have one of the following to use the Password Reset tool:
- RSA token - An RSA token is a hardware device or an application that generates a random code every 60 seconds. This code is used for authentication purposes. Obtain an RSA token by following these instructions
- YubiKey - A YubiKey is a hardware authentication device that can be requested by employees and contractors, but please note that additional approvals by the Cybersecurity Team will be required for contractors.
- CILogon certificate – See instructions on how to get and import into your browser a CILogon certificate
- Kerberos ticket – See instructions on how to configure a browser to use Kerberos and how to use a Kerberos ticket
2. You must enroll each account in the Password Reset Tool. Once enrolled, you do not need to repeat this step.
Once you have completed these steps, you can access the Password Reset Tool.
Changing your SERVICES domain account (aka "Services account") password
1. Log in to the Password Reset Tool using the appropriate authentication mechanism:
Logging in with RSA token
- Select RSASecureID from the pulldown menu:
- Enter your RSA passcode and click Submit button.
Note: Your RSA passcode is either PIN + SecureID token code OR just the token code if the PIN was entered for access
Logging in with YubiKey
- Select YubiKey from the pulldown menu.
You will next be prompted to select a certificate:
b. Select the certificate and click OK.
c. Enter your YubiKey pin and click OK button.
2. Select SERVICES from the Log on to dropdown list. Enter your Services account user name and password to log in.
If the password you entered is incorrect, you will get the error message "Invalid LoginName/Password. Please try again."
3. After you sign in, you can change your password accordingly.
NOTE: If you are using a Mac or Linux computer, you can also change your SERVICES password using the "kpasswd" command in a terminal window:
% kpasswd username@SERVICES.FNAL.GOV
Password for username@SERVICES.FNAL.GOV: <--- type your current SERVICES password here
Enter new password: <--- type your new password here
Enter it again: <--- type your new password here for confirmation
Password changed.
Changing your FERMI domain (Windows login) password
1. Log in to the Password Reset Tool at https://passwordreset.fnal.gov using the appropriate authentication mechanism:
Logging in with RSA token
- Select RSASecureID from the pulldown menu:
- Enter your RSA passcode and click Submit button.
Note: Your RSA passcode is either PIN + SecureID token code OR just the token code if the PIN was entered for access
Logging in with YubiKey
- Select YubiKey from the pulldown menu.
You will next be prompted to select a certificate:
b. Select the certificate and click OK.
c. Enter your YubiKey pin and click OK button.
2. Select FERMI from the Log on to dropdown list. Enter your FERMI Windows domain user name and password to log in.
If the password you entered is incorrect, you will get the error message "Invalid LoginName/Password. Please try again."
3. After you sign in, you can change your password accordingly.
NOTE: If you cannot change your password using this tool, please call the Service Desk at (630) 840-2345 or email servicedesk@fnal.gov for assistance (email response may be as long as 8 hours, during business hours only).