How to reset your SERVICES account password using the Password Reset Tool

Intended for:

Users who need to reset their Services account password using the Password Reset Tool.

Scenario/Use Case:

This article describes how to reset your Services account password using the password manager tool.

NOTE:

You must have one of the following to use the Password Reset tool:

• RSA token or YubiKey
• CILogon certificate
• Kerberos ticket

If you do not have any of these, you must either contact the Service Desk to change your password

If you are using a Mac or Linux computer, you can change your SERVICES password using the "kpasswd" command after the password expires, as long as you remember what the old password is. Detailed instructions can be found at the end of this article.

Instructions:

BEFORE YOU BEGIN:

1. You must have one of the following to use the Password Reset tool:

• RSA token - obtain by following these instructions
• YubiKey - reserved for employees who have access to the lab’s business or financial systems
• CILogon certificate – See instructions on how to get an import into your browser a CILogon certificate
• Kerberos ticket – See instructions on how to configure a browser to use Kerberos and how to use a Kerberos ticket

2.  You can only reset your Services account password after you enroll your Services account using the password manager tool. Procedures on how to enroll your accounts can be found here.

3. Access the password manager tool at https://passwordreset.fnal.gov and click the Reset Password.

4. Enter your user name and select "SERVICES" from the drop-down list. Then click the Continue button.

NOTE: If you have not enrolled this account, you will get this message:

3. You can choose to send an email to the alternative email address you've set up during the enrollment process or you can choose to answer the security questions.

NOTE: In the top right corner, there is a clock. It tells you how much time is left before the page expires and you will have to start over again.

You will get this message if you have waited too long.

5. If you've selected the email verification option, select the email address you wish to use and click Continue.

NOTE: The clock in the top right corner is still counting down while you wait for the email.

6. You will then need to enter the verification code sent to your email. The email sent will look like this:

7. Enter both the verification code from the email and the CAPTCHA code.

8. You can now reset your password.

NOTES:

1. If you are using a Mac or Linux computer, you can change your SERVICES password using the "kpasswd" command in a terminal window after the password expires, as long as you remember what your old password is:

% kpasswd username@SERVICES.FNAL.GOV

Password for username@SERVICES.FNAL.GOV: <--- type your current SERVICES password here.
Enter new password: <--- type your new password here.
Enter it again: <--- type your new password here for confirmation.

Password changed.

2. If you cannot reset your password, please call the Service Desk at (630) 840-2345 or email servicedesk@fnal.gov for assistance.