Update your CalNet passphrase on a managed machine (Berkeley Desktop)

If you use your CalNet ID and passphrase to log in to your campus-managed Windows or Macintosh machine, you may have trouble logging in after you update your passphrase. To avoid this, follow these steps:

I. Change your Calnet ID Passphrase

1. Save all open files and log out of any programs. 
2. Connect to the campus VPN while logged in to your machine with your CalNet account.
3. Change your passphrase using the Calnet Account Manager.

II. Sync your Passphrase with File Encryption and your Computer Account

On Windows: 

1. Press and hold the Windows Key + L to lock the screen.  You can also do this by clicking on the Start button, clicking your user icon, and then selecting Lock.
2. Unlock your machine using your new CalNet passphrase.

On Macs: 

macOS Sonoma 14.0 and later

If you are on campus and connected to the wired network ONLY:

1. 1. Reboot.
   2. Use OLD passphrase to unlock FileVault.
   3. Use the NEW passphrase to log into macOS.
   4. macOS will prompt to update the Keychain database, use the OLD passphrase one final time.
   5. Reboot.
   6. Now FileVault and your computer account will allow you to log in using the new passphrase.  

In most cases, macOS Sonoma will not sync your new CalNet passphrase without assistance from an ITCS technician. In this case, you will still be able to log into the computer by 

• • Unlocking FileVault with your OLD passphrase, then
  • Logging into macOS computer account with your NEW passphrase.

To get assistance fixing FileVault sync with your new passphrase, please contact ITCS for additional support through this link.

macOS Ventura 13.x and earlier

The following procedure should allow you to sync your passphrase without intervention needed from a technician.

1. 1. Lock your machine by pressing Control-Command-Q or by going to the Apple icon in the upper-left corner and selecting “Lock Screen”
   2. Unlock your machine using your new CalNet passphrase
   3. Log out by pressing Shift-Command-Q or by going to the Apple icon in the upper-left corner and selecting “Log Out [Your name]”
   4. Log back in with your new CalNet passphrase.  
   5. When prompted with “The system was unable to unlock your login keychain”, click the “Update Keychain Password” button.  You may be prompted to enter your previous (CalNet) passphrase - if so, please do that.
   6. Now FileVault and your computer account will allow you to log in using the new passphrase.  

If your new passphrase does not work to unlock your machine, your old passphrase may continue to work. If the sync procedure fails, please contact ITCS for additional support: https://technology.berkeley.edu/contact-us.

Please make sure to safely store your new CalNet passphrase (ideally using a passphrase manager like UCB’s free LastPass Premium).  You may not be able to log in to your computer if you forget your new CalNet passphrase.  In this case, IT Staff may request that you bring your computer on-campus for assistance.