Request Local Administrative Password (LAPS) Credentials

Use this request item to obtain authorized Local Administrative Passwords (LAPS credentials) for managed devices that have LAPS operational.

EOTSS End User and IT Service Support

Phone

Support for Commonwealth end users and IT support personnel

Online

The Details

Features

This service allows eligible personnel to request retrieval of Local Administrator Password Solution (LAPS) managed credentials. LAPS provides unique, securely stored local administrator passwords per device, mitigating risks associated with shared or static local admin passwords and supporting least-privilege access management. Requests should include justification aligned with operational needs, security policy, and compliance requirements.

Security & Compliance:
Local Administrative Passwords are governed by the organization’s privileged access management and account security policies. Access to these credentials should follow least privilege principles and be logged for auditing.

How to request

Who can request?

Designated Security Officers (DSOs) ONLY - will request on behalf of Commonwealth employees and their authorized business partners, whether or not currently supported by EOTSS.

Request service via a ServiceNow request

Service Level Expectation (SLE)

Request Local Administrative Password (LAPS) Credentials

SLEResponsibilities/Dependencies

Fulfillment: 

This service was recently introduced as a formal offering in our Product & Service Catalog.  All new request items will be evaluated by EOTSS, who will set and communicate a standard SLE.  In the interim, the response time for this request will be monitored and reviewed based on the complexity of each individual case. End Users can expect to be informed of the estimated response time (SLE) during the intake stage of the request. 

Customer

  • Responsible for adhering to the EOTSS Standard Rules of Engagement.
  • Provide complete and accurate information in the request.
  • Ensure justification aligns to job duties and security guidelines.
  • Maintain confidentiality of retrieved credentials.

EOTSS

  • Validate request legitimacy and approvals.
  • Retrieve the LAPS credential securely.
  • Communicate credential access through approved channels.
  • Record actions in audit logs and ticketing system.

Contact

Phone

Support for Commonwealth end users and IT support personnel

Online

Help Us Improve Mass.gov  with your feedback

Please do not include personal or contact information.
Feedback