1) local connect in as sysdba ( / as sysdba, do not need password)
2) shutdown the database
3) create new password file by
$ orapwd file=$ORACLE_HOME/dbs/orapwSID password=new_password entries=6
4) restart database
5) alter user sys identified by new_password; (sometimes the password in passwd file does not match passwd inside database)
6) remotely connect as sysdba
sys/new_password@SID as sysdba