New Aleph Password Policy
Note: Due to the global surge in online security violations and following push for the increased security measures backed up by legal regulations Information Technology Division ILS team will be implementing new password regulations and policies for Aleph accounts. These changes will take effect in Aleph LIVE Tuesday, April 28th 2009.
Contents of this Document:
2. How to change your password before it expires
3. How to change your password after it has expired
4. What to do if you cannot remember your password
5. Suggestions
Summary of the changes in policies:
1. The most important change is that Aleph users will have to change their Aleph passwords every 180 days much like directory passwords for the College Park staff.
2. Two weeks before the deadline to change the password users will see the following message every time they log into aleph:

It is recommended that you change your password as soon as you see this message. For the instructions on how to change your Aleph password please see the “How to change your password before it expires” part of this tutorial.
3. New password will have to consist of both letters and numbers. You can also use symbols, but that is not currently required. If your password does not match the complexity requirement the following two messages will appear:


4. New password will have to be at least 8 and at most 10 characters long. If your password does not match the length requirement the following two messages will appear:


5. New password has to be different from the previous passwords you have used. If you try to use one of the old passwords you will see the following messages:


6. If the deadline for changing the password is reached Aleph client will not function for your account until you update your password. You will see the following message:

Please see “How to change your password after it has expired” part of this tutorial for more information.
How to change your password before it expires:
1. Two weeks before the deadline to change the password users will see the following message every time they log into aleph:

Aleph will keep functioning for 13 more days after this message appears, however it is recommended that you change your password as soon as possible.
2. After you log in into the module of your choice right-click on the key icon located in the bottom right corner of the Aleph client window.

3. The following menu will appear:

Click on “Change Current Password” option.
4. “Change Current Password dialog box will appear:

Please put your current password into the “Enter Old Password” field and put your new password into the “Enter New Password” and “Re-enter New Password” fields.
5. The change takes effect immediately. This completes your “password change” process.
How to change your password after it has expired:
1. If the deadline for changing the password is reached Aleph client will not function for your account until you update your password. You will see the following message right after the login:

2. Right after you click “OK” following “Change Current Password” window will appear:

Please put your current password into the “Enter Old Password” field and put your new password into the “Enter New Password” and “Re-enter New Password” fields. The change takes effect immediately and Aleph client will open automatically.
This completes your “password change” process.
3. If you click “Cancel” instead of updating the password, Aleph client will not log you in and you will see the following message.

Please click “No”, re-launch aleph client and change your password.
4. If you click “Yes” aleph client will open, but you will see the following message

The client will not be fully functional. The only function that will work is logging in as another user.

5. At this point you have only two options:
a. Use “Login as Another User” function to log in again and change your password.
b. Close and re-open the client to log in and change your password.
What to do if you cannot remember your password:
If you do not remember your password do not worry. Have your campus contact or authorized representitive contact ITD using RxWeb form located at http://www.itd.umd.edu/cgi-bin/ALEPHform.cgi . In the “Problem Summary” field please put “Password Reset Request”and the user ID and one of the ILS Team members will assist you in resetting your password. You will be told what the new password is. For security reasons right after you are told what the new password is follow the steps of the “How to change your password before it expires” tutorial to change your password to what you would like it to be. The reason for that is that ILS Team member will reset your password to a standard one and someone else may attempt to log in using your name and standard password. By changing your password from standard to your own you are eliminating this possibility.
· If you have another password that has to be changed every 180 days (College Park staff have directory password that also has to be changed every 180 days) you can set your Aleph password to be the same. This way you have only 1 password to remember instead of two. To do so make sure you change your Aleph password right after you update your other password. This will help you keep both passwords in sync.
· Alternatively you can use your current Aleph password as a base and add numbers and letter as necessary to make sure it passes the complexity requirements.
· Please do try to change your password before it expires
· ILS Team members can help you reset your password to something new, but they have no way of knowing what your password is. Do not hesitate to contact ILS Team staff if you need assistance with changing your password.