the password management system in OS X

learn more… | top users | synonyms

1
vote
1answer
129 views

After 10.9 upgrade, settings keep getting deleted

Got an exceedingly odd one here. I have installed 10.9 on four machines now and each time I have seen it wipe out the login.keychain and sometimes after that it also wiped out some preferences, but ...
1
vote
0answers
198 views

SSH Agent forwarding [closed]

I'm very new to ssh, And I want to test how agent forwarding is working on Mac OS X. I added one key using ssh-add, but when I try to connect to the server it's asking me a passphrase. Please ...
1
vote
1answer
4k views

Messages agent wants to use your confidential information stored in “<key>” in your keychain

After upgradering to Mavericks, I have been bombarded repeatedly with the following prompt: Messages agent wants to use your confidential information stored in “” in your keychain [Allow] ...
0
votes
0answers
915 views

Create key, certificate signing request, p12 file and provisioning file on Ubuntu for Mac keychain

I use Ubuntu OS most of the time but I also have used OS X for quite a time and now I only use it to maintain my iOS apps. I am trying to create private key, certificate signing request for ...
1
vote
1answer
1k views

CalendarAgent keeps asking for access to “login” after reboot

I'm running Mountain Lion 10.8.5... and every time I restart my computer or log-out & back in, I get a message box saying that "CalendarAgent wants to use "login" keychain". I've tried ...
1
vote
1answer
187 views

Is a there a simple solution to avoid problems with hotspots?

It seems that OSX does not behave well with hotspots. By hotspot, I mean the wireless networks which opens automatically a window for login/password such as when you join them. When you login for ...
0
votes
2answers
230 views

Keychain passwords suggestions that I can't remember, how do I log in from a different pc

I hope that I put it right, that you guys understand. Everywhere I read that Keychain can suggest strong passwords and remember them so I don't have to remember them. Works wonderful. The thing is, ...
1
vote
1answer
617 views

Is it possible to manage the iCloud keychain?

I like to know if it is possible to manage the iCloud keychain, means, deleting elements. I tried the under the OS X keychain app in the iCloud tab but after a clean install of OS X, everything was ...
0
votes
2answers
278 views

Recover ssh private key from Keychain Access

I have OS X 10.8.5 – I just accidentally deleted my .ssh directory. I have backups, but would prefer not to have to go through the trouble. The keys still "work" right now (they're loaded into ...
1
vote
1answer
1k views

Mavericks SSH keys and Keychain

Before Mavericks I could use Keychain to store my SSH keyfile passwords The connection between private key and Keychain was like this: ssh-add -K /path/of/private/key However now in Mavericks, the ...
5
votes
1answer
1k views

What prevents export of a private key from Mavericks keychain?

In Mac OS X Mavericks, I'm not able to export a private key from keychain. I'm getting the following error message: /* In dark wake, no UI possible */ Searching it in Apple documentation fetched the ...
2
votes
1answer
194 views

iCloud Keychain & Wireless

I set up iCloud keychain on a Mavericks laptop and two iPhones. Passwords for Wireless networks are now synchronized among all the devices. So far so good. What is also synchronized is the option to ...
1
vote
1answer
6k views

New “Local Items” Keychain in Mavericks: What's it all about?

Mavericks created a new keychain "Local Items" for me that can't be deleted. What's the idea here and why is there a second keychain in addition to my login keychain?
2
votes
2answers
959 views

What is the EscrowService keychain item?

I was curious what iCloud Keychain (which I haven't explicitly stored any passwords in, yet) was storing, so I headed to Keychain Access. There I found an item I wasn't familiar with called ...
0
votes
1answer
469 views

'No machine certificates found' when adding machine certificate into VPN

I've 2 certificates, one for user authentication and another for machine authentication. My user authentication includes certificate and private key based on which I've generated pkcs12 file using ...
4
votes
4answers
2k views

OSX ssh-agent: no password pasting, and problem with PKCS#8?

I use ssh on my machine, and have set up a long not-human-friendly passphrase which is saved in my password manager. What makes me crazy every time is that I cannot paste into the window pictured ...
14
votes
5answers
7k views

Cannot unlock password protected SSH key in OS X Mavericks

I just upgraded to OSX 10.9, and when trying to establish an SSH connection with public key authentication, a prompt appears asking for my SSH key password. I initially thought that the upgrade ...
0
votes
1answer
91 views

What's Apple Configurator?

There is an error "This root certificate is not trusted" in my Keychain Access. What is "Apple Configurator"? And what should I do about this error?
1
vote
0answers
458 views

safari website requires a client certificate

I went to a site I regularly use and got this when logging in with Safari I seem to have 2 certificated of the same name both issued by Apple and both are not expired (found by searching in ...
0
votes
0answers
44 views

server's certificate

MacPro1,1, OSX 10.7.5 A couple of days ago Apple eliminated my "grandfathered" email server and security settings. Support did direct me to the new settings, but never explained why they changed them ...
1
vote
2answers
6k views

How to stop Chrome’s “Google Chrome wants to use your confidential information stored in your keychain.” question?

Whenever I use Google Chrome to access a login page in which I have the username/password saved in the Keychain (via Safari) Chrome would pop up a dialog box that asks "Google Chrome wants to use your ...
0
votes
0answers
116 views

How to stop trusting a self-signed certificate on OSX 10.8.5?

This is an odd one. I have a web server that presents a self-signed certificate when accessed over HTTPS. Previously, I marked this certificate as "trusted", so it appeared as such in the Keychain ...
5
votes
2answers
368 views

Enable a CRL endpoint for my CA in Keychain Access

I have a Certificate Authority and I'd like to configure CRL. Is there a way to do this in Keychain Access? (I am running OS X Server).
2
votes
2answers
149 views

Revoke an applications access to keychain passwords

I granted an application 'always allow' access to my keychain, i no longer want to have this application set to this, is there a central place where i can see which applications are allowed to access ...
4
votes
1answer
103 views

My mother changed her session password and now the system can't unlock the “login” keychain

The title says most of it. My mother changed her password through the Accounts pane of System Preferences to a lengthy one (17 characters) about three weeks ago. Then, the next day, she left for ...
0
votes
0answers
67 views

Safari / Keychain - Secure login no longer asking for certificate

Running Mountain Lion and Safari. Usually when I login to Barclays, I click "Login" then select my appropriate certificate. Now, it just jumps straight to the access denied page and no longer pops ...
0
votes
1answer
23 views

where is keychains of my lost user account

I lost my user in Mountain Lion and I forced to create a new user account. I access to my previous user's folders now. How can I find my previous keychains? I need to recover them and add into my new ...
0
votes
0answers
69 views

Keychain access -airport password

I can connect without problems to the network with information stored on login keychain but when looking for the password in Keychain Access I discovered that the network name and the password ...
0
votes
0answers
157 views

Keychain Access is empty

When I open my keychain access, it is empty. I can't see anything in it. However, I know that all of my stuff is still working (websites don't prompt me to log in, I join wifi networks, Xcode still ...
0
votes
0answers
219 views

Move passwords from Dashlane to Keychain

I'd like to import the passwords stored in Dashlane into the Mac OS X Keychain. Can you help me to do it? Thanks. I understand that Keychain app is AppleScript-able, and that Dashlane exports ...
0
votes
0answers
181 views

Always get a Security Error for Internal HTTPS Website

My company recently changed an internal site to use HTTPS instead of HTTP (it is our Jira site in case that matters). From what I can tell, this site is using an internal certificate. On our work ...
0
votes
0answers
45 views

Make certificate trusted by default [non admin user]

On my MBP, 10.8.3, I am trying to make a certificate to be always trusted by default. However, it doesn't work. I am using keychain to change the settings. Once the change is done, I have to enter my ...
0
votes
0answers
39 views

List trusted certificates in base64-encoded PEM

Is there any way to list the certificates trusted by the system from the command line in base64-encoded PEM format (i.e. the format used by GPG and OpenSSL)?
2
votes
1answer
1k views

Mac OS X 10.7.5 Keychain hangs forever

Actually not only keychain, but any other apps that request it in any way. The problem first appeared when Adium asked me about untrusted certificates, I selected "Always trust" in system "view ...
2
votes
3answers
4k views

Safari not accepting website certificate

I've been using an internal website at work without any issues until today when I received the error message: "Safari can't open the page "https://...". The error is: "The server "..." did not ...
1
vote
0answers
109 views

Prevent Mail.app from caching passwords in Keychain

I recently upgraded from 10.7 to 10.8, and noticed a behavior change in Mail.app. Previously, in 10.7, I told it not to save the password to my IMAP account, so every time I quit and restarted I was ...
1
vote
1answer
120 views

How to store password for Logical Volume in keychain?

I have a Logical Volume with UUID 73D724AB-9999-9999-9999-8F1E1F5DF83F and it is password protected. The volume name is Workspace. The password is very long. Thus, I would like to create an password ...
2
votes
0answers
67 views

Client certificate required after installing certificate

Using safari on OS X 10.8.2 to connect to an internal server via https:, safari indicates a client certificate is required. Tried dragging the certificate from the url field to the desktop and adding ...
0
votes
0answers
314 views

Change location of Certificate Authority directory in OSX

Call me paranoid. When I create sensitive data on my Mac, I store it in an encrypted sparsebundle. So when I recently used the Certificate Assistant to create a new Certificate Authority, I did so ...
0
votes
0answers
80 views

Added site certificate to X509Anchors keychain and STILL can't view page

I added the certificate to the X509Anchors keychain and I STILL can't view FedEx tracking page. It starts to load and then gets cancelled.
0
votes
0answers
41 views

scripting keychain - disk image - timecapsule

If I click though the gui configuration of time capsule in 10.8 and choose encrypt back ups, 3 things are installed in my keychain. I have scripted the creation of these 3 keys but am having ...
4
votes
1answer
252 views

How to move the /Users to an encrypted ZFS drive?

When setting up a ZFS pool on an encrypted CoreStorage volume, a manual typing of the password is required each time for mounting the volume (due to the problem of OS X thinking that the password is ...
-1
votes
1answer
133 views

Keychain access to Microsot_Intermidiate_Certificates

I need access to Microsoft Intermidiate Certificates in my Key Chain. I unlocked the key chain using administrator password but still no access to the MIC. It keeps asking me for a password (that I ...
0
votes
2answers
5k views

Forcing the wifi password entry dialogue to display

When the administrator of a wifi network changes the network password to something new, previously associated devices that have the old password saved will no longer be able to connect until they ...
2
votes
0answers
52 views

why would keychain access silently discard an S/MIME X.509 certificate?

A co-worker sent me some S/MIME signed email. With anyone else who has done this, the certificate has shown up in my login keychain. Not so with his. I wrote out the attached p7s file, and verified ...
3
votes
1answer
5k views

Repeated pop-ups 'Safari wants to use the “login” keychain'

I get repeated pop-ups saying I then enter the password But the system always keeps on telling me it's the wrong password, which I'm sure it's not This is what the Details reveal: What is ...
1
vote
1answer
86 views

Add admin username & password to the keychain

How can the admin's username password, be remembered or added it to the keychain so these annoying prompts would be less frequent? The app referenced here (Anvil) is not relevant. I'm looking for a ...
0
votes
1answer
111 views

HomeSync / Mobile - Settings & keychain missing

I've recently rolled out an Open Directory domain in our office. The domain has been set up so user profiles are synced with the server via HomeSync, so we could use FileVault2 to encrypt the ...
6
votes
2answers
2k views

How do I get com.apple.servermgrd to use a non-self-signed SSL certificate?

I have received a valid SSL certificate for my Mountain Lion Server (10.8.2 Build 12C3104) and have installed that cert for use by all services (and SSL and other services do not pop up the "Verify ...
0
votes
0answers
14 views

Check keychain availability [duplicate]

I would like to test if a keychain is there and if so mount a server disk. How can check if a keychain is there or not in a script? Thanks for your help.