Inside:

Planned Security Improvements for University Directory Passwords

You use your Directory ID and password every day to perform necessary tasks at the university. Not only do they give you access to your e-mail and electronic timesheet, but they also allow you to access and update sensitive information in the University Directory, Testudo, and other systems. It is important to establish and abide by good practices in managing IDs and passwords in order to protect your personal information. Several changes are being implemented to assist in this effort.

Two new introductions arrive this semester. The first is a requirement for stronger passwords. When resetting or creating a new Directory password, there are several rules that must be met:

• Passwords must be at least eight characters long.
• Passwords must include characters from at least three of the following categories: uppercase letters, lowercase letters, numbers, special characters.
• Passwords may not contain spaces.
• Passwords may not be more than 32 characters long.

You will not be able to choose a password that does not meet these guidelines.

The second new introduction is a self-service process that allows you to change your own password, even if you have forgotten your old one. In order to take advantage of this system, you will have to first log into the University Directory, and then select and answer several security questions. Your answers will be saved. If you forget your password in the future, you can answer the security questions you chose, and provide some other identifying information (such as your university telephone number), thus proving your identity. Then you can select a new password. This system will make it more convenient for you to change your Directory password, as your opportunity to make these changes will not be limited to Help Desk service hours. You can set your security questions and answers now by visiting www.directory.umd.edu and clicking on Set or Change Your University Directory Password Security Questions.

Other changes that will take place in the near future include mandatory password changes every 90 days and automatic account lockouts for repeated failed login attempts. The implementation of these changes is still being planned, and they may cause some temporary inconvenience, but we must all do our part to improve system security and protect our own and our fellow university community members’ sensitive information.

New ID Cards on the Way

New ID cards will be issued to all current students, faculty, and staff by the end of the Spring 2006 semester. The new card can be used in exactly the same way as your old card (building access, dining services, library borrowing, etc.). You can begin using your new card on May 28, 2006, however, you will need to continue using your old card until that date. After May 28th, as a safety precaution, you should either cut up your old card or scratch off the magnetic strip on the reverse side.

Distribution dates and locations have been announced. You will need to show your current ID or other photo identification to obtain your new card. At that time, your new card will be swiped to acknowledge your receipt. Current cardholders do not need to have their pictures retaken.

Wireless Update

Last year many academic buildings on campus had at least one hot spot where you could access the Internet through the university’s wireless network. Signs started appearing on the walls so you can see where the hot spots are. Now, OIT is continuing to expand your wireless access. Ninety percent of the academic buildings have been completely upgraded and have full wireless coverage through “next generation” access points (802.11a/b/g). This is OIT’s new wireless standard.

So, what’s next? OIT will be upgrading the remaining academic buildings, all of which already have complete or significant wireless coverage, to our new wireless standard. Additionally, wireless service in outdoor areas such as McKeldin Mall and Hornbake Plaza will be upgraded. Along with the wireless service upgrade, OIT will roll out a new security model that offers greater data encryption than is currently available.

You can get updates on wireless coverage changes, as well as information on how to access the wireless network at www.oit.umd.edu/wireless.