the password management system in OS X

learn more… | top users | synonyms

4
votes
1answer
733 views

SSH, passphrases, keychains, Could not open a connection to your authentication agent

I will be very surprised if anyone has the answer to this. I have googled for a long time but no luck. As an iOS developer who will shortly be welcoming a new team member I want to set up a ...
3
votes
1answer
150 views

How can I tell Mobile Safari to stop remembering to never remember my password?

I've changed my mind about having Safari/iCloud Keychain never remember my password for a given website. I'd like to remove that setting and store the password, but I can't find any ability to ...
2
votes
1answer
240 views

iCloud Keychain & Wireless

I set up iCloud keychain on a Mavericks laptop and two iPhones. Passwords for Wireless networks are now synchronized among all the devices. So far so good. What is also synchronized is the option to ...
2
votes
1answer
82 views

Client certificate required after installing certificate

Using safari on OS X 10.8.2 to connect to an internal server via https:, safari indicates a client certificate is required. Tried dragging the certificate from the url field to the desktop and adding ...
2
votes
0answers
112 views

Extract passwords from local items keychain files

I know that one can easily migrate any *.keychain from one Mac to another, however, the "local items" keychain introduced in Mavericks is not stored as a *.keychain file but as a list of *.kb and *.db ...
2
votes
0answers
335 views

How to disable keychain completely in Mavericks?

Is there any way to completely disable keychain usage in Mavericks? We have a mac mini at work that we use in the conference room. The problem is that the keychain is not staying synced with Active ...
2
votes
0answers
124 views

Cisco IPSec forgets password (Mavericks)

Cisco IPSec seems to have no way to store the password of the connection permanently. I have found on the web some solutions for the Mountain Lion release, but none for OS-X Mavericks. Is it ...
2
votes
0answers
70 views

How can I revoke an applications access to keychain passwords from the command-line?

Applications can be granted permanent unprompted access to passwords. You can add and revoke these privileges using the Keychain Access utility. (See this answer) I'd like to be able to revoke from ...
2
votes
0answers
60 views

why would keychain access silently discard an S/MIME X.509 certificate?

A co-worker sent me some S/MIME signed email. With anyone else who has done this, the certificate has shown up in my login keychain. Not so with his. I wrote out the attached p7s file, and verified ...
2
votes
0answers
107 views

Where do certificates come from?

On my system when I check Keychain Access I often find new certificates. They get put there behind the scenes. Is that normal? When does this happen? Is there a way I can get alerted when a ...
1
vote
0answers
95 views

How to avoid display HTTPS certificate warning in Chrome

When I browse with Chrome on a web site that has an invalid certificate for some reason (eg my NAS Synology using HTTPS protocol) a warning message like the following Chrome appears to me: If I ...
1
vote
0answers
48 views

What is Migration Assistant doing when it transfers Keychains?

When Migration Assistant (or Setup Assistant) migrates Keychains, it successfully transfers most items as expected, but behaves (very) strangely with respect to the "Local Items" keychain. It appears, ...
1
vote
0answers
68 views

How do I migrate my Keychain's “Local Items” to a new Mac?

After preforming a Mavericks-Mavericks migration using Migration Assistant, I have a "Local Items" Keychain on my new machine in which many (perhaps most) items are out of date (using old passwords), ...
1
vote
0answers
46 views

How to Undo Deny Access on Keychain

When accessing a secure note on my login keychain (Using the Keychain Access app) I accidentally selected "Deny" on the prompt. Now I have no access to this keychain anymore. All of my applications ...
1
vote
0answers
44 views

Non-extractable private key in Keychain Access.app

The manual page for /usr/bin/security on OS X 10.9 indicates that there is a -x option for security import to specify that private keys are non-extractable after being imported. How is this ...
1
vote
0answers
44 views

How can I add an SMIME cert and configure iOS mail to use it?

In order to protect ourselves from NSA-style snooping, we need to start using SMIME encrypted email. Since I have over 10,000 BYOD devices to update, what is the most effective way to Deploy an ...
1
vote
0answers
58 views

When adding passwords to Keychain Access from command line NTLM is converted to MLTN

This is one of the weirdest things... I script adding passwords to Keychain Access when I log in to provide a "SSO" like experience. I use AppleScript to run some terminal commands that look like ...
1
vote
0answers
25 views

Is there any way to identify passwords in my keychains that haven't been accessed in a long time?

I'm a web developer and I deal with a lot of passwords. Many of these I only need for a short while and then never again. My login keychain has quickly grown to several hundred items. I do the ...
1
vote
0answers
238 views

Why does remote MacBook Pro on LAN disappear from Finder sidebar when I connect to it?

This is really odd. I've replaced ethernet cables and what not, but most of the time, when I try to connect to the MBP on my LAN, it will initially disappear from the sidebar before reappearing. The ...
1
vote
0answers
343 views

Keychain Access not revealing passwords

I was able to fix the problem by restarting my computer, but I wanted to see if anyone else had this issue. If I right click on a keychain item and select "Copy Password to Clipboard" the usual ...
1
vote
0answers
345 views

Can't delete preferred networks from wireless settings (comes back up)

I am having an issue with preferred networks in WiFi settings. There are few networks I want to delete - when I do so, the disappear temporarily, but will eventually come back. I believe is to do with ...
1
vote
0answers
160 views

How can I find and remove duplicate Keychain entries

I want to cleanup Keychain before activating iCloud Keychain sync. How can I easily find duplicate Keychain entries?
1
vote
0answers
657 views

safari website requires a client certificate

I went to a site I regularly use and got this when logging in with Safari I seem to have 2 certificated of the same name both issued by Apple and both are not expired (found by searching in ...
1
vote
0answers
122 views

Prevent Mail.app from caching passwords in Keychain

I recently upgraded from 10.7 to 10.8, and noticed a behavior change in Mail.app. Previously, in 10.7, I told it not to save the password to my IMAP account, so every time I quit and restarted I was ...
1
vote
0answers
2k views

How to restore servers signed certificates and private keys?

Starting fresh install of OS X Server on myserver.example.com running Mountain Lion after having saved the private key, intermediate and public certificates on another computer. Now I want to ...
0
votes
0answers
14 views

When i try to install my certificate in keychain, the error says: Unable to import - Error Code 25294

I am using the 10.9.5 version and ios 8. When i try to install my certificate i got through my developer account for push notification for my app in the keychain local items, its not importing. The ...
0
votes
0answers
11 views

Keychain not registering password change

My dad ran the recent iTunes update on his Mini recently (running the latest Mavericks release), and when he was logging back in the system seems to have forgotten his account password. We used his ...
0
votes
0answers
12 views

Ran Migration Assistant now having keychain problems

Going round in circles here - cant access anything requiring Keychain. Have followed instructions to repair Keychain ( get an error - cant find login keychain ) and create new keychain ( again error ...
0
votes
0answers
9 views

Mail certificates: continuously displays password popup

I use a mail certificate issued by GlobalSign. The certificate is in my login keychain. But every time I want to send a signed email it asks me for password to my System keychain. See the screenshot. ...
0
votes
0answers
161 views

Can't remember my Apple ID

I remember my nickname for my Game Center but I don't remember what the Apple ID was for it is there a way to retrieve this information
0
votes
0answers
27 views

How do I ensure that none of my Keychain information is stored on Apple's servers?

I recently enabled iCloud keychain briefly on a pair of my machines, and then disabled it on both (signing out completely from one). I then attempted to follow Apple's instructions for ensuring that ...
0
votes
0answers
316 views

Cannot log into iMessage or FaceTime from mac

I have two macs, and at some point one of them stopped being able to log into Messages ( just the apple account ) and FaceTime. The other mac worked fine, but was not using iCloud keychain ( at the ...
0
votes
0answers
80 views

Getting verify certificate errors after adding Google Account & iCloud keychain problem?

I keep getting a verify certificate error whenever I add my Google Account. The domina is an old company I used to work at and I have removed all account in reference to that account. However I get ...
0
votes
0answers
60 views

Using custom Certificate Authority for SSL websites with Safari on OS X 10.9.4

I have followed the directions here (http://datacenteroverlords.com/2012/03/01/creating-your-own-ssl-certificate-authority/) to create a CA and SSL certs signed by the CA for my own internal websites. ...
0
votes
0answers
26 views

How do I import a SMIME certificate and automatically set the Keychain trust?

We are deploying SMIME certificates to all clients and we need to ensure that these certificates are only trusted for email. Given that our users are "unmanaged" and off the corporate network, how ...
0
votes
0answers
15 views

msmtp not looking at keychain over ssh, only looks when in terminal

I've been wrestling with setting up msmtp for some time now, only to realize that when I run it from a terminal it works as expected (uses my password from my login keychain) but when I'm ssh'ed to ...
0
votes
0answers
67 views

Secure Notes missing in Maverick

Had new hard drive installed and Maverick installed. Now my "secure notes" within utilities, keychain, are gone! The answers all seem to pertain to Notes, which IS in iCloud. How can I get my ...
0
votes
0answers
180 views

Active Directory, Macs and the Keychain

I think everyone with Macs and AD has this issue: Johnny goes on vacation. Johnny does not log out of his Mac, he just lets the screensaver lock it. In fact, the only time Johnny logs out of his Mac ...
0
votes
0answers
35 views

trust self signed certificates from employer

I manually set the permissions to each individual from my employer to Always Trust, is there a way to just Always Trust my companies self signed cert? The biggest problem is email attachments, they ...
0
votes
0answers
38 views

Why is every one of my System Roots Certificates showing as untrusted when applying 'use system defaults' for my Macbook Pro?

There are 222 total System Root Certificates, and each read as currently untrusted, although I have not touched any of the settings. Each certificate is "using system defaults", but clicking the ...
0
votes
0answers
70 views

How can I fix a Mac OS X Mail SMIME issue that's happening after renewing my certificate

I just renewed my SMIME email certificate after the previous one expired. Now any new mail I write in Mail.app simply disappears after I close and reopen Mail.app. They are not deleted (Trash or in ...
0
votes
0answers
65 views

iCloud Keychain: Account sync

I just have a new iPad and set it up. I am using the iCloud Keychain but I thought also accounts like additional (non iCloud) email accounts are synchronized. At least my additional email accounts ...
0
votes
0answers
341 views

Does “Allow AutoFill even for websites that request passwords not be saved” save in Keychain?

I understand that passwords saved through Safari's user interface are stored in the Keychain on the system being used (OS X or iOS 7) and that if I enable iCould Keychain, these Keychains can be ...
0
votes
0answers
41 views

Keychain error -25299 occurred while creating a System Keychain entry

I am receiving the following when trying to make a HD connected to my Airport Extreme my back-up device. Have been backing up this way for 2.5 years. Have not had issues until switching to ...
0
votes
0answers
2k views

Create key, certificate signing request, p12 file and provisioning file on Ubuntu for Mac keychain

I use Ubuntu OS most of the time but I also have used OS X for quite a time and now I only use it to maintain my iOS apps. I am trying to create private key, certificate signing request for ...
0
votes
0answers
63 views

server's certificate

MacPro1,1, OSX 10.7.5 A couple of days ago Apple eliminated my "grandfathered" email server and security settings. Support did direct me to the new settings, but never explained why they changed them ...
0
votes
0answers
152 views

How to stop trusting a self-signed certificate on OSX 10.8.5?

This is an odd one. I have a web server that presents a self-signed certificate when accessed over HTTPS. Previously, I marked this certificate as "trusted", so it appeared as such in the Keychain ...
0
votes
0answers
91 views

Safari / Keychain - Secure login no longer asking for certificate

Running Mountain Lion and Safari. Usually when I login to Barclays, I click "Login" then select my appropriate certificate. Now, it just jumps straight to the access denied page and no longer pops ...
0
votes
0answers
219 views

Always get a Security Error for Internal HTTPS Website

My company recently changed an internal site to use HTTPS instead of HTTP (it is our Jira site in case that matters). From what I can tell, this site is using an internal certificate. On our work ...
0
votes
0answers
102 views

Added site certificate to X509Anchors keychain and STILL can't view page

I added the certificate to the X509Anchors keychain and I STILL can't view FedEx tracking page. It starts to load and then gets cancelled.