the password management system in OS X

learn more… | top users | synonyms

0
votes
1answer
102 views

Error when running security in Terminal

I'm trying to export the keychains in Terminal. This is the code I used security> export -k SystemCACertificates.keychain -t all -f openssl -o goodone.txt And this is the error I got security: ...
0
votes
1answer
185 views

OS X 10.11 CardDAV with self-signed certificate

The CardDAV server I'm trying to connect to uses a self-signed certificate. Unfortunately I cannot do anything about it. In previous OS X versions, when connecting to this server the system asked if ...
2
votes
0answers
39 views

Grant rights on a certificate to an app through the shell

I'm currently looking for a way to grant an application rights to a certificate in my /Library/Keychains/System.keychain through the shell. I can currently do this through the Keychain Access App by ...
1
vote
1answer
926 views

Client SSL certificate failing in Safari (and what is SOSCCThisDeviceIsInCircle?)

I'm having difficulty using an X.509 certificate to do client authentication from Safari (9.0.1, as on OS X 10.10.5). The symptom is that I go to a https://... site which does client certificate ...
1
vote
1answer
261 views

CloudKeyChainProxy eating CPU

I have the CloudKeyChainProxy process eating my cpu and I can't use keychain any more nor sync with iCloud, I have a backup in time machine, would suggest an action ? EtreCheck version: 2.6.3 (223) ...
3
votes
1answer
169 views

How to add a self-signed root CA and always trust it from CLI on OSX

I succeeded importing a root CA to the keychain with sudo security add-trusted-cert -d -r trustRoot -k "/Library/Keychains/System.keychain" CA.crt But it's marked as Use System Defaults, like ...
1
vote
0answers
54 views

Certificate Assistant 5.0 CSR Error

I am trying to create a certificate for someone else with a CA I created in Certificate Assistant. However, certificate assistant will no open the CSR generated by the user. I receive the following: ...
1
vote
1answer
583 views

Keychain won't reveal forgotten password; how to fix?

Skype automatically logs me in by getting the password from my login keychain. This means I haven't typed the password in a long time, and I have forgotten it. When I select Skype (or anything else) ...
0
votes
1answer
231 views

Outlook 2011 Keychain entry rewritten - prompting for password after 10.10.5 update - keychain issue?

After applying the Yosemite 10.10.5 update and Security Update 2015-004 (1.0), my installation of Outlook 2011 prompts me for a password every time I check for mail. I have tried repairing Keychain ...
0
votes
0answers
32 views

Adding a company certificate to the keychain

I read the answer for this question OS X - Signing installer/application and found that I must put a certificate on a keychain to be able to run productsign on an installer produced by productbuild. ...
1
vote
1answer
107 views

How to install subordinate CA certificate into keychain from Terminal?

I'm a Windows engineer, setting up a Active Directory PKI, but know very little about Macs. I'm aware of how to install root certificates into the system keychain using: sudo security add-trusted-...
1
vote
0answers
20 views

Save password for custom keychain

I get this keychain promt after every reboot. Can I just set the password somehow, so I don't have to enter it again?
1
vote
0answers
127 views

Cannot reset default keychain

I recently forgot my login password, and had to change it through utilities and terminal. The problem is, after changing the password, the keychain access keeps asking for the "Local items" keychain ...
0
votes
1answer
82 views

Help me solve this Macbook wifi mystery

We noticed this week that our Macbook wifi connection was slow. On inspection, we discovered that the wifi wasn't auto-connecting to our network, but rather one named ATT5g---. If I selected our ...
9
votes
2answers
3k views

Unable to export .p12 certificate from Keychain Access [duplicate]

I'm trying to export a Developer certificate from Keychain Access. I've followed all the instructions and got to the point where I need to enter the "login" keychain password. However, when I enter ...
0
votes
0answers
109 views

“Verify Certificate” pops up every time I connect to the network

Every time I connect to the eduroam network, which is secured via PEAP/MSCHAPv2, the “Verify Certificate” dialog box pops up. I have to click “Continue” every time I open my laptop, which gets quite ...
14
votes
6answers
4k views

Keychain won't let copy passwords after 10.11.1 update

After the 10.11.1 update, I can not get access to some of encrypted data stored in my keychains with Keychain Access.app. Most notably, I can not see or copy passwords stored. Normally, to do so, you'...
0
votes
1answer
18 views

KeyChain Access and GPG Keychain - should those be running simultaneously?

I have installed GPG Suite and found out also during this time that my OS X has some app that stores all my passwords under my screenlock password - total news to me. Can I get rid of Apple app if I ...
0
votes
2answers
723 views

Certificate signed by an unknown authority in keychain after upgrading to El Capitan

I've found a random certificate in my keychain after upgrading to El Capitan‎ on both my Macs. It's called "ENTIDAD PUBLICA EMPRESARIAL RED.ES". It's showing a warning that it was signed by an unknown ...
1
vote
1answer
544 views

I can't use Mail.app in El Capitan to encrypt email with a self-signed certificate

I generated a self-signed root S/MIME certificate using Certificate Assistant. I made sure the resulting certificate was in my Keychain, and trusted it explicitly. In attempts to send encrypted mail ...
0
votes
0answers
64 views

I have two keychains, how do I get rid of one?

I lost my Skype password and reads somewhere online to look in Keychain Access. When I couldn't retrieve the password I decided to Reset My Default Keychain. Now I have two keychains: Login and ...
1
vote
1answer
463 views

security dump-trust-settings causes an error

When I type security dump-trust-settings I get the following two errors: Cert 1: GTE CyberTrust Global Root SecTrustSettingsCopyTrustSettings: The specified item could not be found in the keychain. ...
0
votes
1answer
2k views

“This certificate was signed by an untrusted issuer” problem after updating to El Capitan

Most of the https connections returns that. Most of them is signed by Symantec. But not all. I tried to google the problem, but with no luck, seems like I only the one who experiencing this problem. ...
0
votes
1answer
505 views

User can't login to AD bound Mac

I have several Macs bound to a Windows domain with AD. The users login to the Macs with their Windows credentials and so far it has worked fine. Last week we changed the password policy so that ...
2
votes
0answers
205 views

Keychain popup freezes my safari when I visit specific sites

So I'm usually a chrome user, but ever since buying a macbook pro, I switched to safari because chrome drained my battery like mad and it generated too much heat. The transition wasn't bad, I actually ...
0
votes
0answers
34 views

iCloud Keychain

Just for my curiosity and knowledge, from a Software or Hardware stand point prospective, the iCloud Keychain service, on top of 256-bit AES encryption, in order to protect users data, it also uses: ...
1
vote
1answer
147 views

How to use Keychain to Auto Login into Authenticated Websites

I am running El Capitan. I added login credentials into Keychain as follows: Name/Where (the full web url) Account (the login username) Password (the login password) I then launched the web page ...
0
votes
1answer
230 views

Skipped iCloud Keychain configuration during install of El Capitan

During installation of El Capitan I skipped the iCloud Keychain configuration because it wouldn't validate the code sent to my phone. What was this process for and how do I restart it now that the ...
0
votes
0answers
181 views

How to unlock Keychain: “access to this item is restricted”, when I accidentally denied it?

Running: OS X 10.10 - Macbook I accidentally hit "deny" on trying to retrieve one of my passwords in Keychain access, and now it is saying "access to this item is restricted (-67808)". I have tried ...
17
votes
3answers
6k views

OS X 10.11 unable to press “allow” on Keychain Access dialogs

I'm running into an issue where keychain password verification box does not verify password - does not shake for incorrect password and nothing happens when I press "allow". I'm using iCloud keychain. ...
11
votes
2answers
14k views

Junos Pulse Crashing on El Capitan (10.11), Causing Keychain Issues?

Whenever I attempt to start a VPN Connection with Junos Pulse (Version 5.0.11) on El Capitan it freezes midway through connecting and my login keychain becomes inaccessible to any other apps. The only ...
1
vote
1answer
542 views

How can I change Keychain permissions without being physically present?

According to Apple's Documentation, for certain operations, the user must be physically present. However, I am trying to administer a Xcode Server build box via Screen Sharing, and I can't add or ...
0
votes
1answer
80 views

Why do I have to reenter my passwords after moving HDD between Macs?

I recently had to transplanted my HDD into another Macbook Pro (after my own broke). I could boot without any problems in the new machine, but for some most (all?) applications wanted me to reenter my ...
0
votes
2answers
221 views

How can I import a PGP public key into Keychain Access.app?

I have someone's PGP Public Key (.asc) and would like to import that into Keychain Access.app so that I can email them with my existing PKI certificates which I already use with Mail.app. How can I do ...
1
vote
0answers
104 views

Fix behaviour of «* wants to use your * keychain»

I have my keychain set to lock when sleeping. So when I unlock my computer after not using it for some time, I get a bunch of password prompts like «* wants to use your * keychain» for Mail, ...
0
votes
0answers
82 views

iCloud, keychain problems on MacBook Air

My friend has an iPad. I have never used an iPad, but am trying to help her set things up better -- so it's clearly a case of the blind leading the blind. We couldn't install Dropbox on the iPad ...
0
votes
1answer
118 views

Get my PKG Installer To Prompt and Store Admin User/Pass

On Mac OSX, the third-party command line tool I have needs to run as super user unfortunately. I'm building a front-end GUI for it. My Qt/C++ application is using QProcess to shell out to Bash and run ...
0
votes
0answers
142 views

Restore saved networks after “Reset Network Preferences” wiped them from all devices

While recently traveling abroad I had trouble connecting a temporary SIM card in my iPad to its cellular network. While trying to fix the issue some advice said to try "Reset Network Settings". Well, ...
1
vote
0answers
211 views

Cannot export private key from System.keychain with Keychain Access or command line

I'm trying to export a private key from System.keychain in Keychain Access. I've tried running Keychain Access as a root. No matter what, I always get the following error. When I try to export the ...
0
votes
0answers
97 views

how to restore user password using Time Machine

Using 10.9.5, about a month ago I reset a user's password. The user forgot her password, so I reset it using a CMD-R reboot and passwordreset. Of course this left her login keychain out of sync (maybe ...
0
votes
0answers
273 views

Can't download in App Store after Yosemite upgrade:

I've just upgraded to Yosemite and am now unable to download anything from the appstore. (I've tried a new download of xcode and an update of iMovies) I'm able to navigate around the store and sign ...
0
votes
1answer
72 views

servermgrd certificate in Yosemite server chain of trust

I am setting up a file server in Yosemite and am trying to remove vulnerabilities so my organization's IT dept will approve. I acquired a trusted SSL certificate and installed it with all of the ...
0
votes
0answers
75 views

Keychain Sync for WIFI Password not Working with Meraki

My iPad is configured with Meraki device management and includes information for a WIFI network. I want to sync all of the WIFI passwords to my iCloud Keychain, but the password for the network that I ...
3
votes
3answers
2k views

Stolen iPhone: what is the security risk?

Unfortunately today my iPhone 6 Plus was stolen from my pocket on the streets of Sao Paulo. I did not have cellular data turned on. I had Touch ID and a 4 digit number lock in place. How much data ...
1
vote
3answers
12k views

How can I access an iOS Mail password stored in Keychain?

I upgraded my wife's iPhone to a newer model but she can't remember her Yahoo mail password which is stored in Keychain on her old phone. She uses the standard iOS Mail app which successfully fetches ...
1
vote
1answer
938 views

iCloud keychain problems - asking passwords, can't change password, can't unsync

Main symptom: When I reboot I get multiple prompts asking for the "local items" keychain password. Details: The password required is my old iCloud password, not my current user account password ...
0
votes
0answers
70 views

Independently decrypt System.keychain using SystemKey file

From backup I've extracted (and I can extract any additional file) /var/db/SystemKey and /Library/Keychains/System.keychain I was able to unlock previously used Login.keychain with previous user ...
1
vote
1answer
135 views

Internet Access after renew the expired com.apple.servermgrd certificate

I inherited some months ago a Mac mini server running OS X 10.8.5 Initially, I configured it with the new network settings, DNS name, etc and all was working fine in regard to file sharing, accessing ...
1
vote
0answers
173 views

Macbook Pro got stolen. Thief knows password. iCloud Keychain all compromised?

My Macbook was stolen. And I think the thief knows my Macbook's login (admin) password (not Apple ID). (I know, very stupid of me) Does that mean all my passwords stored in iCould Keychain are now ...
1
vote
2answers
6k views

A keychain could not be found to store “<Network>”

Just got a new Macbook, my first Mac in 5 years, and I'm having trouble getting it to save my Wifi network information. If I remember correctly, I was able to connect to the network at the office with ...