How to Access

Everyone accessing UCSF resources will have a password for their computers, email and access to email and Office 365 applications on their mobile devices.

NOTE: To access your email on your mobile device, you will need to Enroll Your Mobile Device in Intune Company Portal.

The Password Management Tool provides users with the ability to complete the following processes:

NOTE: Please be sure to follow ALL of the instructions for the process selected (From those listed below) to avoid a lockout to your UCSF account.

I have never changed my UCSF Password, start here
I need to change my UCSF Password, start here
I am locked out of my account or I have forgotten my password, start here
I need to update my security questions, start here
I would like to register my mobile device, start here

Description

UCSF has an annual password change policy that requires UCSF employees to change their network password at least once a year. This page will provide you with the necessary information to change your UCSF password and the passwords for your campus devices.

Benefits

Strong password management practices (e.g. At least 12 characters with 3 of the 4 categories - uppercase, lowercase, numbers and/or symbols) are critical to keeping you, your work and UCSF secure. Learn more about password complexity requirements
Most systems at UCSF (email, wireless, Pulse VPN and many applications) use your network login or email credentials (or both) to authenticate.
UCSF provides tools to help you manage your passwords and keep you safe and working (e.g. Keeper Password vault).

Support

We have multiple ways for you to get the help you need. For questions and support, check the Frequently Asked Questions page or submit a ticket through our Employee Self-Service Portal. You can also select the Get Password Help button in the corner of this page for assistance.

NOTE: The Password Virtual Assistant can only be accessed on password-related UCSF pages on the it.ucsf.edu site.

Training

To learn more about the specific process for changing your UCSF network and device passwords, enrollment in Intune or using the Keeper Password Vault, please review the following information:

Update your Windows or Mac computer passwords
Update your password to access the UCSF WIFI networks to avoid lockouts to your account
Enroll Your Mobile Device in Intune Company Portal

Enroll in and Use Keeper Password Vault

NOTE: It is a best practice to update your password on any mobile devices or applications used at UCSF (e.g. Jabber) at the same time as you change your UCSF password. Consult these best practices when changing your UCSF password.

Requirements and Limitations

Please ensure that you have dedicated enough time to change your password within the Password Management Tool in one sitting without interruption to avoid any issues with process. Be sure to note all of the devices used to access UCSF systems (including WiFi) and applications in one place and change your password for each (Also, think of other places (e.g. Software and Systems) where you might need to update your password).

If you would like to access your email and Office 365 on your mobile devices you will need to enroll in Intune.

Password Management Tool

The Password Management Tool is self-service system to configure, change and manage your UCSF password and security questions as well as unlock your account and register a mobile device to complete these processes from your device. The following steps below will demonstrate how to complete these process(es) within the Password Management Tool:

Enroll and Log In

NOTE: Be sure to follow these instructions step-by-step to avoid a lockout to your UCSF Account.

Go to the UCSF Password Management Tool. Enter either your 9-digit UCSF ID number (02xxxxxxx) or your UCSF email address.
Create six security questions and answers to authenticate your account and enroll in the tool.
Your enrollment is successful if you are directed to the main menu and receive the message, “All enrollment tasks are complete. Download and register for the mobile app to easily unlock your account from your phone in case you are locked out."
From the main menu, you have the ability to:
- Change your password
- Unlock your account
- Update your security questions
- Register your mobile device(s)

Change Your Password

NOTE: Be sure to follow these instructions step-by-step to avoid a lockout to your UCSF Account.

Before you change your password, we recommend that you stop all of your devices (phones, tablets, computers, etc) from connecting to UCSF resources (Including WiFi) linked to your account; this will help to prevent getting locked out of your account.

NOTE: After changing your password, be sure to update your password in your device's settings if used to access the UCSF WIFI network to avoid potential account lockouts. Learn more about Updating your password to access the UCSF WIFI networks

Go to the UCSF Password Management Tool. Enter either your 9-digit UCSF ID number (02xxxxxxx) or your UCSF email address.
Log in with your password or answer your security questions.
From the main menu, click the Change passwords button.
Click the checkbox(es) next to the account(s) for which you want to update your password. You can use the suggested password or create one.

NOTE: You must meet the minimum requirements to save your password. UCSF policy forces unique passwords for each account. It is also a best practice to review the last date that your AD account passwords were changed and update them accordingly. Learn more about UCSF password requirements.
Enter your new password, confirm it and click the Change passwords button.
After your new password has been saved, you will be taken to a Confirmation screen stating that your password has been changed.
NOTE: You will also receive a confirmation email that your password has changed as well.
Important: Log out of your computer (or Lock your computer) and then log back in using your new password.
Remember to immediately update your password on all your other devices for Wi-Fi, UCSF email and any other necessary apps.

Unlock Your Account

NOTE: Be sure to follow these instructions step-by-step to successfully unlock your UCSF Account.

When you enter the wrong password too many times, your account will be locked out. You can use the UCSF Password Management Tool to unlock your account(s).

Go to the UCSF Password Management Tool. Enter either your 9-digit UCSF ID number (02xxxxxxx) or your UCSF email address.
Log in with your password or answer your security questions.
From the main menu, select the Unlock Accounts button.
Check the box next to the account(s) you want to unlock, and click the Unlock button.
You will receive a notification that your account was successfully unlocked.

NOTE: Once you have updated your network password, you should do the following:

Sign in to all your mobile devices as soon as possible
Use your new password to sign in to Wi-Fi and mobile email apps
This will help prevent getting locked out of your account

Update Your Security Questions

NOTE: Be sure to follow these instructions step-by-step to successfully configure security questions for your UCSF Account.

You can update your security questions, answers or both at any time.

Go to the UCSF Password Management Tool. Enter either your 9-digit UCSF ID number (02xxxxxxx) or your UCSF email address.
Log in with your password or answer your security questions.
From the main menu, click the Update security questions button.
From the Security questions page, you have the ability to change your password for one or all of your associated accounts at once.
Choose the question, answer or both that you want to edit. Make your change(s). NOTE: You can delete questions by selecting the X next to the question. If you remove any questions, you will be prompted to add another if you do not meet the minimum number of standard (5) and user-defined questions (2).
Check for any typos in your answers by clicking and holding down the Reveal answers button before saving your changes.
Click Update to save your changes.
NOTE: You can also view previous changes to your security questions by clicking the Show change history button and then clicking on the plus (+) sign next to each security question.

Register Your Mobile Device

NOTE: Be sure to follow these instructions step-by-step to register your mobile device as a means to change your password or unlock your UCSF account.

The UCSF Password Management Tool is only available when you are on the UCSF network. To help you manage your account(s) on the go, you will need to download the Hitachi ID Bravura One app for Android or iOS.

NOTE: To successfully complete the registration process, you should download the Hitachi ID Bravura One mobile app on your device before starting the registration process.

You need to register your device once with the tool in order to use the mobile app. Follow these instructions after you've installed the mobile app on your Android or iOS device.

NOTE: The session will time out if not completed in the allotted time. Be sure to set aside enough time to complete this process without pause.

Go to the UCSF Password Management Tool. Enter either your 9-digit UCSF ID number (02xxxxxxx) or your UCSF email address.
Log in with your password or answer your security questions.
On the main menu, select Register mobile devices.
Click the Register button to begin the device registration process.
The Activate Mobile Device screen will load with a QR code.
NOTE: You should have the Hitachi id Bravura One app installed on your device as you will need it to scan this QR code in later steps.
Launch the mobile app on your phone or tablet and select Register Device.
Grant the app access to your camera, then aim the camera at your computer's screen to scan the QR code. The app will recognize the QR code and display your UCSF employee ID on your phone.
If the employee ID is correct, click Save.
Enter a Connection Profile Name and then click the OK button.
The UCSF Password Management Tool: Login screen will load on your device.
On your computer screen, you will receive a message stating Activated Device.
After clicking OK in the dialog window on your computer, the mobile app will load the main menu where you can reset your password or unlock your account(s), just like the desktop version of the tool.

Microsoft Local Administrator Password Solution (LAPS)

Content Restricted