the password management system in OS X

learn more… | top users | synonyms

4
votes
1answer
2k views

Why am frequently asked for access to my Keychain?

Since using Migration Assistant to move from an old iMac (2009) to a new MacBook Pro, I find that I'm repeatedly asked for access to my Keychain. Prior to moving to the new machine, once I unlocked my ...
8
votes
2answers
1k views

Mail on OS X: Choose which X.509 certificate to use for signing mails

I've got multiple X.509 certificates from different CA's for different purposes -- for example, one from CAcert.org, and another one from my university. Both have different advantages and ...
2
votes
1answer
975 views

Keychain error -25308 while trying to add drive to Time Machine

I am trying to configure my Mac to use a time-capsule for Time Machine. After entering in the Time Capsule password I get the following error: Keychain error -25308 occurred while creating a ...
2
votes
0answers
115 views

How can I revoke an applications access to keychain passwords from the command-line?

Applications can be granted permanent unprompted access to passwords. You can add and revoke these privileges using the Keychain Access utility. (See this answer) I'd like to be able to revoke from ...
1
vote
1answer
168 views

After 10.9 upgrade, settings keep getting deleted

Got an exceedingly odd one here. I have installed 10.9 on four machines now and each time I have seen it wipe out the login.keychain and sometimes after that it also wiped out some preferences, but ...
1
vote
0answers
324 views

SSH Agent forwarding [closed]

I'm very new to ssh, And I want to test how agent forwarding is working on Mac OS X. I added one key using ssh-add, but when I try to connect to the server it's asking me a passphrase. Please ...
1
vote
1answer
12k views

Messages agent wants to use your confidential information stored in “<key>” in your keychain

After upgradering to Mavericks, I have been bombarded repeatedly with the following prompt: Messages agent wants to use your confidential information stored in “” in your keychain [Allow] ...
0
votes
0answers
2k views

Create key, certificate signing request, p12 file and provisioning file on Ubuntu for Mac keychain

I use Ubuntu OS most of the time but I also have used OS X for quite a time and now I only use it to maintain my iOS apps. I am trying to create private key, certificate signing request for ...
2
votes
1answer
3k views

CalendarAgent keeps asking for access to “login” after reboot

I'm running Mountain Lion 10.8.5... and every time I restart my computer or log-out & back in, I get a message box saying that "CalendarAgent wants to use "login" keychain". I've tried ...
1
vote
1answer
337 views

Is a there a simple solution to avoid problems with hotspots?

It seems that OSX does not behave well with hotspots. By hotspot, I mean the wireless networks which opens automatically a window for login/password such as when you join them. When you login for ...
1
vote
2answers
447 views

Keychain passwords suggestions that I can't remember, how do I log in from a different pc

I hope that I put it right, that you guys understand. Everywhere I read that Keychain can suggest strong passwords and remember them so I don't have to remember them. Works wonderful. The thing is, ...
2
votes
1answer
3k views

Is it possible to manage the iCloud keychain?

I like to know if it is possible to manage the iCloud keychain, means, deleting elements. I tried the under the OS X keychain app in the iCloud tab but after a clean install of OS X, everything was ...
0
votes
2answers
686 views

Recover ssh private key from Keychain Access

I have OS X 10.8.5 – I just accidentally deleted my .ssh directory. I have backups, but would prefer not to have to go through the trouble. The keys still "work" right now (they're loaded into ...
1
vote
1answer
4k views

Mavericks SSH keys and Keychain

Before Mavericks I could use Keychain to store my SSH keyfile passwords The connection between private key and Keychain was like this: ssh-add -K /path/of/private/key However now in Mavericks, the ...
7
votes
1answer
3k views

What prevents export of a private key from Mavericks keychain?

In Mac OS X Mavericks, I'm not able to export a private key from keychain. I'm getting the following error message: /* In dark wake, no UI possible */ Searching it in Apple documentation fetched the ...
2
votes
2answers
317 views

iCloud Keychain & Wireless

I set up iCloud keychain on a Mavericks laptop and two iPhones. Passwords for Wireless networks are now synchronized among all the devices. So far so good. What is also synchronized is the option to ...
5
votes
2answers
9k views

New “Local Items” Keychain in Mavericks: What's it all about?

Mavericks created a new keychain "Local Items" for me that can't be deleted. What's the idea here and why is there a second keychain in addition to my login keychain?
2
votes
2answers
3k views

What is the EscrowService keychain item?

I was curious what iCloud Keychain (which I haven't explicitly stored any passwords in, yet) was storing, so I headed to Keychain Access. There I found an item I wasn't familiar with called ...
1
vote
1answer
1k views

'No machine certificates found' when adding machine certificate into VPN

I've 2 certificates, one for user authentication and another for machine authentication. My user authentication includes certificate and private key based on which I've generated pkcs12 file using ...
11
votes
4answers
4k views

OSX ssh-agent: no password pasting, and problem with PKCS#8?

I use ssh on my machine, and have set up a long not-human-friendly passphrase which is saved in my password manager. What makes me crazy every time is that I cannot paste into the window pictured ...
16
votes
5answers
13k views

Cannot unlock password protected SSH key in OS X Mavericks

I just upgraded to OSX 10.9, and when trying to establish an SSH connection with public key authentication, a prompt appears asking for my SSH key password. I initially thought that the upgrade ...
0
votes
1answer
132 views

What's Apple Configurator?

There is an error "This root certificate is not trusted" in my Keychain Access. What is "Apple Configurator"? And what should I do about this error?
1
vote
0answers
825 views

safari website requires a client certificate

I went to a site I regularly use and got this when logging in with Safari I seem to have 2 certificated of the same name both issued by Apple and both are not expired (found by searching in ...
2
votes
2answers
14k views

How to stop Chrome’s “Google Chrome wants to use your confidential information stored in your keychain.” question?

Whenever I use Google Chrome to access a login page in which I have the username/password saved in the Keychain (via Safari) Chrome would pop up a dialog box that asks "Google Chrome wants to use your ...
6
votes
2answers
993 views

Enable a CRL endpoint for my CA in Keychain Access

I have a Certificate Authority and I'd like to configure CRL. Is there a way to do this in Keychain Access? (I am running OS X Server).
2
votes
2answers
589 views

Revoke an applications access to keychain passwords

I granted an application 'always allow' access to my keychain, i no longer want to have this application set to this, is there a central place where i can see which applications are allowed to access ...
4
votes
1answer
154 views

My mother changed her session password and now the system can't unlock the “login” keychain

The title says most of it. My mother changed her password through the Accounts pane of System Preferences to a lengthy one (17 characters) about three weeks ago. Then, the next day, she left for ...
0
votes
0answers
319 views

Safari / Keychain - Secure login no longer asking for certificate

Running Mountain Lion and Safari. Usually when I login to Barclays, I click "Login" then select my appropriate certificate. Now, it just jumps straight to the access denied page and no longer pops ...
0
votes
1answer
29 views

where is keychains of my lost user account

I lost my user in Mountain Lion and I forced to create a new user account. I access to my previous user's folders now. How can I find my previous keychains? I need to recover them and add into my new ...
1
vote
1answer
269 views

Keychain Access is empty

When I open my keychain access, it is empty. I can't see anything in it. However, I know that all of my stuff is still working (websites don't prompt me to log in, I join wifi networks, Xcode still ...
0
votes
0answers
283 views

Always get a Security Error for Internal HTTPS Website

My company recently changed an internal site to use HTTPS instead of HTTP (it is our Jira site in case that matters). From what I can tell, this site is using an internal certificate. On our work ...
4
votes
2answers
3k views

Mac OS X 10.7.5 Keychain hangs forever

Actually not only keychain, but any other apps that request it in any way. The problem first appeared when Adium asked me about untrusted certificates, I selected "Always trust" in system "view ...
2
votes
4answers
11k views

Safari not accepting website certificate

I've been using an internal website at work without any issues until today when I received the error message: "Safari can't open the page "https://...". The error is: "The server "..." did not ...
1
vote
0answers
141 views

Prevent Mail.app from caching passwords in Keychain

I recently upgraded from 10.7 to 10.8, and noticed a behavior change in Mail.app. Previously, in 10.7, I told it not to save the password to my IMAP account, so every time I quit and restarted I was ...
1
vote
1answer
231 views

How to store password for Logical Volume in keychain?

I have a Logical Volume with UUID 73D724AB-9999-9999-9999-8F1E1F5DF83F and it is password protected. The volume name is Workspace. The password is very long. Thus, I would like to create an password ...
2
votes
1answer
92 views

Client certificate required after installing certificate

Using safari on OS X 10.8.2 to connect to an internal server via https:, safari indicates a client certificate is required. Tried dragging the certificate from the url field to the desktop and adding ...
0
votes
0answers
136 views

Added site certificate to X509Anchors keychain and STILL can't view page

I added the certificate to the X509Anchors keychain and I STILL can't view FedEx tracking page. It starts to load and then gets cancelled.
4
votes
1answer
339 views

How to move the /Users to an encrypted ZFS drive?

When setting up a ZFS pool on an encrypted CoreStorage volume, a manual typing of the password is required each time for mounting the volume (due to the problem of OS X thinking that the password is ...
-1
votes
1answer
427 views

Keychain access to Microsot_Intermidiate_Certificates

I need access to Microsoft Intermidiate Certificates in my Key Chain. I unlocked the key chain using administrator password but still no access to the MIC. It keeps asking me for a password (that I ...
0
votes
2answers
17k views

Forcing the wifi password entry dialogue to display

When the administrator of a wifi network changes the network password to something new, previously associated devices that have the old password saved will no longer be able to connect until they ...
2
votes
0answers
99 views

why would keychain access silently discard an S/MIME X.509 certificate?

A co-worker sent me some S/MIME signed email. With anyone else who has done this, the certificate has shown up in my login keychain. Not so with his. I wrote out the attached p7s file, and verified ...
4
votes
2answers
17k views

Repeated pop-ups 'Safari wants to use the “login” keychain'

I get repeated pop-ups saying I then enter the password But the system always keeps on telling me it's the wrong password, which I'm sure it's not This is what the Details reveal: What is ...
1
vote
1answer
112 views

Add admin username & password to the keychain

How can the admin's username password, be remembered or added it to the keychain so these annoying prompts would be less frequent? The app referenced here (Anvil) is not relevant. I'm looking for a ...
0
votes
1answer
253 views

HomeSync / Mobile - Settings & keychain missing

I've recently rolled out an Open Directory domain in our office. The domain has been set up so user profiles are synced with the server via HomeSync, so we could use FileVault2 to encrypt the ...
6
votes
2answers
4k views

How do I get com.apple.servermgrd to use a non-self-signed SSL certificate?

I have received a valid SSL certificate for my Mountain Lion Server (10.8.2 Build 12C3104) and have installed that cert for use by all services (and SSL and other services do not pop up the "Verify ...
0
votes
0answers
15 views

Check keychain availability [duplicate]

I would like to test if a keychain is there and if so mount a server disk. How can check if a keychain is there or not in a script? Thanks for your help.
4
votes
2answers
5k views

Is there any way to crack a password-protected disk image?

I have created a .dmg file with password. Unfortunately I forgot the password and I my Google searches have not resulted in a way to reset the password of this .dmg file. Please help me find a ...
3
votes
1answer
105 views

protecting keychain data when using Time Machine

I plan to use Time Machine to back up by data. If the backup is not encrypted, can someone with access to the TimeMachine disk access my keychain passwords? Do they at least need to know my system ...
0
votes
1answer
139 views

Login keychain disappears on login

Running 10.8.2 on MacBook Pro, sometime after upgrading to Mountain Lion 10.8.1 I started getting the message box that passwords, etc. could not be saved to keychain. I did the usual (repair ...
7
votes
1answer
14k views

Should time machine backups be encrypted

I am new to the Mac and was setting up my Time Machine. However, it seems Time Machine also backs up information in the keychain. I was wondering if that means I should use an encrypted disk to store ...