PASSWORDS
MSU Health Information Technology (HIT) will ensure that a stringent Password policy is maintained for all users. Passwords are an important aspect of computer security as they form the front line of protection for user accounts. A poorly chosen password may result in the compromise of MSU HIT’s network. As such, all MSU Medical areas (CHM, COM, CON, Olin and HealthTeam) employees including contractors and vendors, with access to hc.msu.edu systems are responsible for utilizing the guidelines as outlined below to select and secure their passwords.
User accounts that have system-level privileges (such as Centricity Business or Centricity EMR) granted through group memberships or programs are recommended to have a different password from all other accounts held by that user.
Passwords must not be inserted into email messages or other forms of electronic communication.
Do not give the password to anyone. If someone demands the password, immediately contact the Security Officers.
If an account or password is suspected to have been compromised, report the incident to the Security Officers and change all passwords associated with the account holder.
Change your Network Password
This is the password that is used to authenticate to the HIT network. It is the first one that is used when logging on to the computer in the morning. See the Manage Password section for details.
Creating a Strong Password
When the reset password, consider these tips to strengthen the password. The new password:
-
Must be at least 8 characters long
-
Must contain at least one upper case and/or one lower case letter.
-
Must contain at least one number.
-
Inclusion of one or more special characters (e.g., @, #, $) are recommended but not required.
-
The password cannot contain the user name.
-
Passwords will be set to expire after 365 days, at which time the user must select a new password.
-
Four historical passwords will be stored on the server; when a new password is created, none of the most recently stored passwords can be reused.
-
Passwords must not be accessible to, shared with or used by anyone other than the account holder.
-
Locked out user must call the main HIT line at 355-6531 to request an account to be unlocked.
Account Lockout: All Users
-
Must have Z-PID or A-PID to identify over the phone.
-
If the user does not know Z-PID or A-PID, then the user must log onto myid.msu.edu to retrieve number.
-
Contact HIT and give the number to HIT Technician. The HIT support staff will log onto myid.msu.edu and verify your number.
-
If there is no Z-PID or A-PID for the account user, photo ID will be required to reset the password.