Intended for: Services account users
This article provides answers to common questions regarding Services account.
What is a "Services Account?"
A "Services Account" enables you to access a number of important applications at Fermilab with a single username/password. Applications now available via the "Services Account" are: Email, Instant Messaging, FermiDash, SharePoint, Fermilab Time and Labor Reporting (FTL), Redmine, Service Desk, and VPN.
How do I get a Services Account?
Everyone who is a Fermilab user gets a Services account automatically. Your username is the same as your Fermilab email username. There is nothing special you have to do to get the account. However, you do need to get your initial password.
If you don’t have a Services account and you are a new Fermilab user (persons affiliated with a FNAL experiment, not employed by FNAL) you will need to request a Visitor ID and computer accounts using this form
How do I get my initial Services Account password?
To get your initial Services Account password, a user must first contact the Service Desk to get issued a first time default password. Once a default password is issued, users can access Fermilab’ s Password Manager Tool https://password-reset.fnal.gov/ to change it.
You will be given a one-time password and a link to change it. If you encounter issues changing your password, please contact the Service Desk at (630) 840-2345.
Note: Your Services Account password should be different from your Fermi Windows domain or Kerberos passwords. Please select a different password for your Services Account from either of these.
How do I change an existing Services Account password (after the first time?)
Change your password by going to
Why do I need a Services Account when I already have a Kerberos Account | Windows Account | Kerberos Certificate?
The majority of web applications used at the laboratory have moved to using either LDAP or Federation for authentication rather than the certificates. (Those that still accept certificates require certificates from the CILogon certificate authority.) The LDAP and Federation services use the SERVICES account for authentication, allowing you to maintain a single username and password for these applications.
When do I need to use my Services Account?
You can use your Services Account any time you access the following applications:
- Fermilab Email
- Fermilab Instant Messaging
- Fermilab Service Desk
- Fermilab Time and Labor Reporting (FTL)
- Fermilab SharePoint
- Fermi Redmine
More applications will be added in time.