the password management system in OS X

learn more… | top users | synonyms

0
votes
1answer
70 views

Keychain cleanup before sync

Would you recommend a cleanup of the keychain before activating iCloud Keychain sync.
0
votes
1answer
75 views

Any Keychain Access.app documentation?

Is there any documentation about the capabilities of the Keychain Access application included with OS X 10.9?
1
vote
0answers
175 views

How can I find and remove duplicate Keychain entries

I want to cleanup Keychain before activating iCloud Keychain sync. How can I easily find duplicate Keychain entries?
0
votes
2answers
825 views

Export Wi-Fi passwords from keychain

I want to export all my Wi-Fi passwords and import it to the keychain of my girlfriends Mac. Is this even possible? And how its done? With iCloud Keychain Sync this passwords should also be available ...
1
vote
2answers
1k views

Why am I asked for my Keychain password when the keychain is already unlocked?

Why am I asked for my Keychain password when the keychain is already unlocked? This behavior started suddenly after migrating to a new machine.
4
votes
1answer
985 views

Why am frequently asked for access to my Keychain?

Since using Migration Assistant to move from an old iMac (2009) to a new MacBook Pro, I find that I'm repeatedly asked for access to my Keychain. Prior to moving to the new machine, once I unlocked my ...
6
votes
2answers
696 views

Mail on OS X: Choose which X.509 certificate to use for signing mails

I've got multiple X.509 certificates from different CA's for different purposes -- for example, one from CAcert.org, and another one from my university. Both have different advantages and ...
2
votes
1answer
818 views

Keychain error -25308 while trying to add drive to Time Machine

I am trying to configure my Mac to use a time-capsule for Time Machine. After entering in the Time Capsule password I get the following error: Keychain error -25308 occurred while creating a ...
2
votes
0answers
74 views

How can I revoke an applications access to keychain passwords from the command-line?

Applications can be granted permanent unprompted access to passwords. You can add and revoke these privileges using the Keychain Access utility. (See this answer) I'd like to be able to revoke from ...
1
vote
1answer
153 views

After 10.9 upgrade, settings keep getting deleted

Got an exceedingly odd one here. I have installed 10.9 on four machines now and each time I have seen it wipe out the login.keychain and sometimes after that it also wiped out some preferences, but ...
1
vote
0answers
237 views

SSH Agent forwarding [closed]

I'm very new to ssh, And I want to test how agent forwarding is working on Mac OS X. I added one key using ssh-add, but when I try to connect to the server it's asking me a passphrase. Please ...
1
vote
1answer
8k views

Messages agent wants to use your confidential information stored in “<key>” in your keychain

After upgradering to Mavericks, I have been bombarded repeatedly with the following prompt: Messages agent wants to use your confidential information stored in “” in your keychain [Allow] ...
0
votes
0answers
2k views

Create key, certificate signing request, p12 file and provisioning file on Ubuntu for Mac keychain

I use Ubuntu OS most of the time but I also have used OS X for quite a time and now I only use it to maintain my iOS apps. I am trying to create private key, certificate signing request for ...
2
votes
1answer
2k views

CalendarAgent keeps asking for access to “login” after reboot

I'm running Mountain Lion 10.8.5... and every time I restart my computer or log-out & back in, I get a message box saying that "CalendarAgent wants to use "login" keychain". I've tried ...
1
vote
1answer
268 views

Is a there a simple solution to avoid problems with hotspots?

It seems that OSX does not behave well with hotspots. By hotspot, I mean the wireless networks which opens automatically a window for login/password such as when you join them. When you login for ...
1
vote
2answers
377 views

Keychain passwords suggestions that I can't remember, how do I log in from a different pc

I hope that I put it right, that you guys understand. Everywhere I read that Keychain can suggest strong passwords and remember them so I don't have to remember them. Works wonderful. The thing is, ...
2
votes
1answer
2k views

Is it possible to manage the iCloud keychain?

I like to know if it is possible to manage the iCloud keychain, means, deleting elements. I tried the under the OS X keychain app in the iCloud tab but after a clean install of OS X, everything was ...
0
votes
2answers
467 views

Recover ssh private key from Keychain Access

I have OS X 10.8.5 – I just accidentally deleted my .ssh directory. I have backups, but would prefer not to have to go through the trouble. The keys still "work" right now (they're loaded into ...
1
vote
1answer
2k views

Mavericks SSH keys and Keychain

Before Mavericks I could use Keychain to store my SSH keyfile passwords The connection between private key and Keychain was like this: ssh-add -K /path/of/private/key However now in Mavericks, the ...
5
votes
1answer
2k views

What prevents export of a private key from Mavericks keychain?

In Mac OS X Mavericks, I'm not able to export a private key from keychain. I'm getting the following error message: /* In dark wake, no UI possible */ Searching it in Apple documentation fetched the ...
2
votes
1answer
250 views

iCloud Keychain & Wireless

I set up iCloud keychain on a Mavericks laptop and two iPhones. Passwords for Wireless networks are now synchronized among all the devices. So far so good. What is also synchronized is the option to ...
4
votes
2answers
8k views

New “Local Items” Keychain in Mavericks: What's it all about?

Mavericks created a new keychain "Local Items" for me that can't be deleted. What's the idea here and why is there a second keychain in addition to my login keychain?
2
votes
2answers
2k views

What is the EscrowService keychain item?

I was curious what iCloud Keychain (which I haven't explicitly stored any passwords in, yet) was storing, so I headed to Keychain Access. There I found an item I wasn't familiar with called ...
1
vote
1answer
931 views

'No machine certificates found' when adding machine certificate into VPN

I've 2 certificates, one for user authentication and another for machine authentication. My user authentication includes certificate and private key based on which I've generated pkcs12 file using ...
7
votes
4answers
3k views

OSX ssh-agent: no password pasting, and problem with PKCS#8?

I use ssh on my machine, and have set up a long not-human-friendly passphrase which is saved in my password manager. What makes me crazy every time is that I cannot paste into the window pictured ...
15
votes
5answers
11k views

Cannot unlock password protected SSH key in OS X Mavericks

I just upgraded to OSX 10.9, and when trying to establish an SSH connection with public key authentication, a prompt appears asking for my SSH key password. I initially thought that the upgrade ...
0
votes
1answer
121 views

What's Apple Configurator?

There is an error "This root certificate is not trusted" in my Keychain Access. What is "Apple Configurator"? And what should I do about this error?
1
vote
0answers
695 views

safari website requires a client certificate

I went to a site I regularly use and got this when logging in with Safari I seem to have 2 certificated of the same name both issued by Apple and both are not expired (found by searching in ...
1
vote
2answers
12k views

How to stop Chrome’s “Google Chrome wants to use your confidential information stored in your keychain.” question?

Whenever I use Google Chrome to access a login page in which I have the username/password saved in the Keychain (via Safari) Chrome would pop up a dialog box that asks "Google Chrome wants to use your ...
5
votes
2answers
690 views

Enable a CRL endpoint for my CA in Keychain Access

I have a Certificate Authority and I'd like to configure CRL. Is there a way to do this in Keychain Access? (I am running OS X Server).
2
votes
2answers
356 views

Revoke an applications access to keychain passwords

I granted an application 'always allow' access to my keychain, i no longer want to have this application set to this, is there a central place where i can see which applications are allowed to access ...
4
votes
1answer
127 views

My mother changed her session password and now the system can't unlock the “login” keychain

The title says most of it. My mother changed her password through the Accounts pane of System Preferences to a lengthy one (17 characters) about three weeks ago. Then, the next day, she left for ...
0
votes
0answers
95 views

Safari / Keychain - Secure login no longer asking for certificate

Running Mountain Lion and Safari. Usually when I login to Barclays, I click "Login" then select my appropriate certificate. Now, it just jumps straight to the access denied page and no longer pops ...
0
votes
1answer
25 views

where is keychains of my lost user account

I lost my user in Mountain Lion and I forced to create a new user account. I access to my previous user's folders now. How can I find my previous keychains? I need to recover them and add into my new ...
1
vote
1answer
208 views

Keychain Access is empty

When I open my keychain access, it is empty. I can't see anything in it. However, I know that all of my stuff is still working (websites don't prompt me to log in, I join wifi networks, Xcode still ...
0
votes
0answers
228 views

Always get a Security Error for Internal HTTPS Website

My company recently changed an internal site to use HTTPS instead of HTTP (it is our Jira site in case that matters). From what I can tell, this site is using an internal certificate. On our work ...
4
votes
2answers
2k views

Mac OS X 10.7.5 Keychain hangs forever

Actually not only keychain, but any other apps that request it in any way. The problem first appeared when Adium asked me about untrusted certificates, I selected "Always trust" in system "view ...
2
votes
4answers
7k views

Safari not accepting website certificate

I've been using an internal website at work without any issues until today when I received the error message: "Safari can't open the page "https://...". The error is: "The server "..." did not ...
1
vote
0answers
125 views

Prevent Mail.app from caching passwords in Keychain

I recently upgraded from 10.7 to 10.8, and noticed a behavior change in Mail.app. Previously, in 10.7, I told it not to save the password to my IMAP account, so every time I quit and restarted I was ...
1
vote
1answer
179 views

How to store password for Logical Volume in keychain?

I have a Logical Volume with UUID 73D724AB-9999-9999-9999-8F1E1F5DF83F and it is password protected. The volume name is Workspace. The password is very long. Thus, I would like to create an password ...
2
votes
1answer
84 views

Client certificate required after installing certificate

Using safari on OS X 10.8.2 to connect to an internal server via https:, safari indicates a client certificate is required. Tried dragging the certificate from the url field to the desktop and adding ...
0
votes
0answers
107 views

Added site certificate to X509Anchors keychain and STILL can't view page

I added the certificate to the X509Anchors keychain and I STILL can't view FedEx tracking page. It starts to load and then gets cancelled.
4
votes
1answer
289 views

How to move the /Users to an encrypted ZFS drive?

When setting up a ZFS pool on an encrypted CoreStorage volume, a manual typing of the password is required each time for mounting the volume (due to the problem of OS X thinking that the password is ...
-1
votes
1answer
267 views

Keychain access to Microsot_Intermidiate_Certificates

I need access to Microsoft Intermidiate Certificates in my Key Chain. I unlocked the key chain using administrator password but still no access to the MIC. It keeps asking me for a password (that I ...
0
votes
2answers
11k views

Forcing the wifi password entry dialogue to display

When the administrator of a wifi network changes the network password to something new, previously associated devices that have the old password saved will no longer be able to connect until they ...
2
votes
0answers
64 views

why would keychain access silently discard an S/MIME X.509 certificate?

A co-worker sent me some S/MIME signed email. With anyone else who has done this, the certificate has shown up in my login keychain. Not so with his. I wrote out the attached p7s file, and verified ...
4
votes
2answers
10k views

Repeated pop-ups 'Safari wants to use the “login” keychain'

I get repeated pop-ups saying I then enter the password But the system always keeps on telling me it's the wrong password, which I'm sure it's not This is what the Details reveal: What is ...
1
vote
1answer
103 views

Add admin username & password to the keychain

How can the admin's username password, be remembered or added it to the keychain so these annoying prompts would be less frequent? The app referenced here (Anvil) is not relevant. I'm looking for a ...
0
votes
1answer
194 views

HomeSync / Mobile - Settings & keychain missing

I've recently rolled out an Open Directory domain in our office. The domain has been set up so user profiles are synced with the server via HomeSync, so we could use FileVault2 to encrypt the ...
6
votes
2answers
3k views

How do I get com.apple.servermgrd to use a non-self-signed SSL certificate?

I have received a valid SSL certificate for my Mountain Lion Server (10.8.2 Build 12C3104) and have installed that cert for use by all services (and SSL and other services do not pop up the "Verify ...