Typically everyone at MIT needs to reset their Kerberos password by end of July each year. 


For those resetting their Kerberos password from off-campus, see this article from MIT IS&T:
Remote Domain Computers and Password ChangesThe Change your password while on the VPN section should be useful. 


After the password has been reset make note of steps 3 and 4;  step 3 it says to Lock your computer by either clicking "Windows+L" or "Ctrl-Alt-Delete" and selecting "Lock" and step 4 Wait 10 minutes for your computer to establish a connection to the domain and sync the new password. 

How to Connect to the VPN


How to Obtain Global Protect VPN

I forgot my password, can I have it reset?

 

If you are not being prompted to reset your password then you probably had already set it in the past year and you are ok.  If you would like to reset your password, even without being prompted to do so - go to https://ca.mit.edu:444/ca/cpw  Then run Cert-Aid.



Greetings,
All MIT community members should renew their personal certificates on every device by July 30, 2025, to keep access to web applications that require certificate authentication.
All certificates obtained within the past year will expire on July 30, 2025. Please renew your certificates on all devices before this date to avoid disruptions. Renewal is not automatic and requires a few steps:
1. Before Renewing:
  • You will be prompted to change your password if it’s over a year old. Learn about strong passwords.
  • If your Windows computer is on the MIT domain and you’re off campus, read this article to ensure you can log in after a password change.
  • Have your Duo device handy for authentication.
2. How to Renew:
3. After Installing New Certificates:
Questions? Contact the IS&T Service Desk at servicedesk@mit.edu or call 617-253-1101.
Sincerely,
Kyle Filipe
Senior Director, IT Support Services
kb.mit.edukb.mit.edu
Strong Passwords - IS&T Contributions - Hermes
Strong Passwords Password rules Your password or pass phrase must conform to the following rules: It must be different from your current password. It must be 8 characters or longer but should be 15 characters or more. It must contain characters from ...
kb.mit.edukb.mit.edu
Remote Domain Computers and Password Changes - IS&T Contributions - Hermes
page: Who this is for If you are on a domaincontrolled Windows PC and change your Kerberos password https://ca.mit.edu:444/ca/cpw, you may experience logon issues with your computer if it has not properly synced with the domain controller after your password change ...
kb.mit.edukb.mit.edu
Duo Authentication Landing Page - IS&T Contributions - Hermes
more information on securing your data, see Information Protection @ MIT http://infoprotect.mit.edu. On this page: Overview Duo https://www.duosecurity.com/ is a twofactor authentication system that requires both a credential (certificate, username/password) and a registered thing you have (smart ...
kb.mit.edukb.mit.edu
Installing Root and Personal Certificates on iOS - Community Contributions - Hermes
Personal Certificates can only be installed in Safari. \\ NO other browsers are supported. (These instructions have been tested on devices running iOS 14 and higher) You CANNOT install certificates on an iOS device without creating a passcode for it. This feature cannot ...