Google to Gold - FAQ's
If your question is not listed below, please contact the ITS Support Center by opening a ticket, (keyword G2G) at https://itrequest.ucsc.edu or contact the ITS Support Center by email help@ucsc.edu or telephone 459-HELP(4357).
General
- I’m not sure I have a Gold password
- I don't remember my Gold password
- How does this affect my phone/desktop apps (mail, calendar, etc)?
- Is the Blue password going away? What will use the Blue password?
- What is Blue vs Gold?
- What is a CruzID?
- I only have a Blue password. How will I access email when Google switches to the Gold password?
- Is the change to the gold password going to break or reset existing OAuth client secrets for accounts that use them?
- How do I change my Gold password?
- Why are we doing this?
- How do I setup an email client?
- How will I log into my email once Google switches to the Gold password?
- What information is going to be shared?
- I already us Google's 2FA. How will this be affected by the change to the Gold password ?
- What if I don't see my email application?
- I can’t log into Eduroam.
- List of known apps that won’t work with “Remember me for 14 days”.
- I am a staff retiree and I don't think I have a gold password.
- I am a staff retiree and I have a gold password but I don't understand the change to Google including ucsc.edu email accounts.
- I am an Emeriti and I don't know if I have a gold password.
- How do I accept the BigFix offer for Google Sync for Outlook?
- How do I switch between profiles and/or select a default profile?
- I use a mobile device to see my email. What do I need to do when the change to the gold password takes place?
Functional Accounts
- I am the owner/sponsor of a GoogleApps-Only (functional) account that only has a Blue password. When I receive a new Gold password, how do I change the Gold password to that account?
- Do I have to MFA with my GoogleApps-Only or Operational/Functional Account?
- My Functional Account does not have a secondary account owner. How do I get one setup?
General
I’m not sure I have a Gold password
You may have a Gold password and not remember it. Perform these steps to determine if you have a Gold password or not:
- Open a browser and go to CruzID Manager
- On the home page, do you see a link that says, Gold Password ? If you see this link, you have a gold password.
I don't remember my Gold password.
Go to CruzID Manager to re-create a Gold password. Follow the steps on this page for complete instructions. If you require assistance, please submit a support ticket with the ITS Support Center using the keyword G2G at https://itrequest.ucc.edu , or by email help@ucsc.edu or telephone 459-HELP(4357)
How does this affect my phone/desktop apps (mail, calendar, etc)?
Once Google Suite requires the Gold password, you will need to access your Google account and applications using your Gold password. If you are MFA required, you will also have to MFA into these applications. Selecting the Remember Me for 14 days checkbox will keep you logged in for 14 days.
Is the Blue password going away? What will use the Blue password?
The Blue password, which is currently in use for Eduroam, will be in place for the foreseeable future.
What is Blue vs Gold?
The difference between the Blue and Gold password is in the security of the password, not their strength. There are specific security requirements for systems that handle Gold passwords that aren't in place for systems that handle Blue passwords.
What is a CruzID?
Your CruzID is the first part of your email. For example: if your email is - bananaslug@ucsc.edu , your CruzID is bananaslug .
I only have a Blue password. How will I access email when Google switches to the Gold password?
On August 20, you will automatically be issued a Gold password. This new Gold password will be the same as your Blue password. For extra security, it is recommended that you change the Gold password in CruzID Manager before the cutover on August 26, 2019.
Is the change to the gold password going to break or reset existing OAuth client secrets for accounts that use them?
For functional accounts, the cutover will reset existing OAuth client secrets for accounts that use them. Specifically, when a person tries to log in to their Google email, they will be prompted for their password. They will now log in with their gold password. Other applications that use Google OAuth on that same device will have the same privileges. If they have other devices, they will have to do this on each device.
How do I change my Gold password?
Users that only have a Blue passwords will be given a Gold password on August 20, 2019. This password will be identical to your Blue password. We recommend that you go to CruzID Manager to change your Gold password to a new, unique password.
Why are we doing this?
The move to Gold passwords is a continuation of the UC system-wide effort to provide increased security against cybercrime. Gold passwords are used to meet specific security requirements for systems.
How do I setup an email client?
Detailed instructions for all supported email clients can be found on this page.
How will I log into my email once Google switches to the Gold password?
When you access your email for the first time after the cutover, your login experience will be a little bit different. You will need to re-authenticate with your gold password (not your blue password) on your first login. If you access your email from a browser (Chrome, Safari, Firefox, Edge, IE) details of what you will experience can be found here . If you access your email from an email client (i.e.;Thunderbird, Apple Mail, O365, PostBox, Spark, etc...) or if you use an application that accesses any GSuite tool (i.e.; LucidChart, etc...) details of what you will experience can be found here .
What information is going to be shared?
When you log in for the first time after Google has switched to the Gold password, you will need to accept a screen that looks like this:
The information that is shared is your affiliation, your name and your UCSC.edu email address.
I already us Google's 2FA. How will this be affected by the change to the Gold password?
Google 2FA only works with the blue password. When you are MFA required and the switch is made to the gold password, you will no longer be authenticating through Google 2FA. You will only authenticate through Duo using your Gold password.
What if I don't see my email application?
Any application not listed below was not a part of our test plan due to resource limitations:
- AIS
- Apple Calendar
- Apple Notes
- Apple Mail
- Chrome - Android
- Chrome - iOS (iPhone)
- Chrome - OSX (Mac)
- Chrome - Windows (PC)
- Firefox - Android
- Firefox - iOS (iPhone)
- Firefox - OSX (Mac)
- Firefox - Windows (PC)
- Microsoft Edge
- Microsoft Internet Explorer
- Microsoft Outlook
- Microsoft Outlook for Office 365
- Windows Mail
- Gmail App - Android and iOS
- Google Drive App - Android and iOS
- Google Photos App - Android and iOS
- Lucidchart on OSX - Chrome and Firefox
- PostBox
- Safari - iOS and OSX
- Samsung Email - Android
- Spark - OSX
- Mozilla Thunderbird - OSX and Windows
If you do not see your application you may continue to use it but you may encounter complications once we make the cutover to the gold password. In order to avoid any disruption, on or before August 26th, we recommend you use one of the applications from our test plan.
I can’t log into Eduroam.
Eduroam is not a Google application, therefore it is not affected by this change. You will continue to use your Blue password to log into Eduroam. For more details, please refer to the ITS eduroam site with updated information:https://its.ucsc.edu/wireless/eduroam.html
List of known apps that won’t work with “Remember me for 14 days”.
Due to the sensitive nature of data involved in these apps, users will be forced to authenticate more often:
- Health e-Messenger
- Tracker form I-9 system
- FIS (Banner Financials)
- AHP-UCSC
- CruzBuy
This is not a complete list. If you find other apps that do not work with the “Remember me for 14 days” feature, please let us know by filing an ITS Service Desk Ticket
I am a staff retiree and I don't think I have a gold password.
Some retirees only have a Blue password. On August 20, 2019, you will be assigned a Gold Password. Your new Gold password, will be the same as your existing Blue password . As a result, ITS recommends that you go to CruzID Manager t o change your Gold password to a new, unique password before you are required to MFA.
I am a staff retiree and I have a gold password but I don't understand the change to Google including ucsc.edu email accounts.
The password for UCSC Google Applications is changing. Google applications include: campus email (@ucsc.edu), calendar, drive (docs, sheets, forms) groups, sites, etc. Currently, users access Google applications using their Blue password. On August 26, 2019. you will need to use your Gold password in order to access UCSC Google Apps.
I am an Emeriti and I don't know if I have a gold password.
Don't remember your Gold password? Go to CruzID Manager and select the Forgot Your Password link. Follow the steps on this page for complete instructions. If you require further assistance, please submit a support ticket with the ITS Support Center using the keyword G2G at https://itrequest.ucsc.edu , or by email help@ucsc.edu
How do I accept the BigFix offer for Google Sync for Outlook?
- Launch BigFix by pressing the windows key on the lower left corner of your keyboard. Type “BigFix”.
- Once BigFix is launched, click on the Catalog tab. You will see a Google Suite Sync for Outlook tile.
- Click on the Google Suite Sync for Outlook tile, then click GET to install the application. It will take a couple minutes to install.
- To verify the install was complete, click on the History tab. The Google Sync for Outlook tile should be marked as completed.
- If you are still having trouble with Google Sync for Outlook, please submit a ticket with the ITS support center at https://itrequest.ucsc.edu or by calling 9-HELP.
How do I switch between profiles and/or select a default profile?
- Using the sync tool will create another profile containing exactly one email account each time it is run. If you want to switch between profiles, you will need to restart Outlook to switch to the other profile containing the other email address. When Outlook starts up, you will see a Choose Profile screen.
- To select a default profile, click on Options and make sure that the Set as default profile checkbox is checked. This will prevent the Choose profile dialog box from showing up again.
- If the wrong profile was selected and you need to select another one, you will need to open the Control Panel from the start menu.
- Select Mail. A Mail setup screen will appler.
- Now select Show Profiles
- Select the profile you want to use for Microsoft Outlook. Click OK.
I use a mobile device to see my email. What do I need to do when the change to the gold password takes place? If you use a mobile device, you will be prompted to enter your CruzID and your Gold password. Next you will be prompted to MFA. Your mailbox will open promptly after you have performed these steps.
Functional Accounts
I am the owner/sponsor of a GoogleApps-Only (functional) account that only has a Blue password. When I receive a new Gold password, how do I change the Gold password to that account?
On August 20th, if your functional account does not have a Gold password, it will be assigned one. This new Gold password will be the same as the account’s existing Blue password.
After August 20th, you can reset the Gold password to your GoogleApps-Only Account by logging into cruzid.ucsc.edu with the CruzID and Gold password of that account. After you’ve logged in, select the Gold password tile in the home menu to reset it.
If you need further assistance, please submit a support ticket with the ITS Support Center using the keyword G2G at https://itrequest.ucsc.edu , or by email help@ucsc.edu or telephone 459-HELP(4357).
Do I have to MFA with my GoogleApps-Only or Operational/Functional Account?
All Functional Accounts do not require MFA. You are not required to setup your Functional Account for MFA.
My Functional account does not have a secondary contact. How do I get one setup?
Submit a support ticket with the ITS Support Center using the keyword G2G at https://itrequest.ucsc.edu, or send an email help@ucsc.edu and let them know who you'd like to assign as the secondary contact.
