Annually, usually in January.  But remember that once a CD has been burned, it retains that password for the rest of time.  That's why it is important that your credit union have a policy and procedures for safekeeping not only the CD itself, but the password for that CD (but NOT in the same location!).