the password management system in OS X

learn more… | top users | synonyms

3
votes
0answers
158 views

Why not have iCloud keychain as default?

Yosemite 10.10.1 and iOS 8.1.2 On my Keychain Access on OS X, I have the "login" default keychain and an "iCloud" keychain (I have iCloud Keychain ON for all my devices). I'm just wondering, could I ...
2
votes
0answers
173 views

Why does Keychain ask for the same password twice?

For security reasons, I have a different password on my keychain than my user account password. I have achieved this by opening Keychain Access.app, right-clicking on the Login keychain, choosing ...
2
votes
0answers
353 views

ssh asks for passphrase not keychain password after locking keychain

I'm using Yosemite and store the ssh passphrase in a separate keychain (not the login keychain). This all works fine as long as the keychain is unlocked. When I lock the keychain, I expected ssh to ...
2
votes
0answers
456 views

How to avoid display HTTPS certificate warning in Chrome

When I browse with Chrome on a web site that has an invalid certificate for some reason (eg my NAS Synology using HTTPS protocol) a warning message like the following Chrome appears to me: If I ...
2
votes
0answers
500 views

How to disable keychain completely in Mavericks?

Is there any way to completely disable keychain usage in Mavericks? We have a mac mini at work that we use in the conference room. The problem is that the keychain is not staying synced with Active ...
2
votes
0answers
161 views

Cisco IPSec forgets password (Mavericks)

Cisco IPSec seems to have no way to store the password of the connection permanently. I have found on the web some solutions for the Mountain Lion release, but none for OS-X Mavericks. Is it ...
2
votes
0answers
151 views

How can I revoke an applications access to keychain passwords from the command-line?

Applications can be granted permanent unprompted access to passwords. You can add and revoke these privileges using the Keychain Access utility. (See this answer) I'd like to be able to revoke from ...
2
votes
0answers
119 views

why would keychain access silently discard an S/MIME X.509 certificate?

A co-worker sent me some S/MIME signed email. With anyone else who has done this, the certificate has shown up in my login keychain. Not so with his. I wrote out the attached p7s file, and verified ...
2
votes
0answers
124 views

Where do certificates come from?

On my system when I check Keychain Access I often find new certificates. They get put there behind the scenes. Is that normal? When does this happen? Is there a way I can get alerted when a ...
1
vote
0answers
29 views

Wanted, a way to change many keychain passwords at once

Problem: employer uses a common account (username and password) for numerous logins within their domain, and requires frequent password changes. Keychain can't seem to figure out that e.g. any ...
1
vote
0answers
136 views

View Keychain from encrypted IOS 8.2 backup?

Is there any way to access the keychain from an Iphone 5 IOS 8.2 backup? Here are the hard facts: encrypted backup where I KNOW the password device is lost So far I could restore all the ...
1
vote
0answers
248 views

Lost Wi-Fi passwords after reset network settings on iPhone

After a network configuration reset on my iPhone all Wi-Fi passwords were lost. They were stored in iCloud Keychain, synced with my Mac, where they disappeared too. This is very frustrating since it ...
1
vote
0answers
616 views

com.apple.WebKit.Networking.xpc wants to sign using key “privateKey” in your keychain

I've seen this error in a few other areas of the forums; however, I'm trying to understand what does "key 'privateKey'" means. I'm trying to authenticate to a VPN portal and this is the error that ...
1
vote
0answers
178 views

“Show Password” in Keychain Access doesn't work

I am having a problem, as a program is requesting my RSA password but my Mac won't let me see it. As I check the "show password" (mostrar contraseña) chechbox, it immediately unmarks itself. I ...
1
vote
0answers
307 views

OS X asking for local items keychain password

My mid-2010 macbook pro was running just fine on OS X 10.10, and then I decided to enable the guest account. My account still works fine, but when I login into the guest account, I get an annoying ...
1
vote
0answers
129 views

Guest User has keychain issues until I reboot

We have some systems used as general-purpose systems. We configured the systems to enable the Guest user; periodically, when trying to log into the system, a keychain notification pops up saying it ...
1
vote
0answers
159 views

Yosemite Keychain Access Not Showing Keychain List

I have Yosemite, and my Keychain Access only shows the login keychain, giving me no option to switch between keychains. As you can see, my sidebar on the left is missing. I try toggling it with ...
1
vote
0answers
339 views

“iCloud Keychain Was Reset” after every reboot

Everytime I reboot my mac (10.9.5), I get a notice that "iCloud Keychain Was Reset". I can set it up again without problems, but I shouldn't have to keep setting it up. What's going on?
1
vote
0answers
141 views

Change Managed, Mobile Account Password through script?

Wondering if anyone has worked with something similar before - we have a number of Mac laptops connected to an Active Directory server, and on first login users create a Managed, Mobile account. When ...
1
vote
0answers
83 views

SSH Public key access - my password is being stored somewhere?

I've just created a Public/Private key to access my server via SSH, this has all worked fine but I added a passphrase to the key when it was created. The first time I logged in via terminal and ...
1
vote
0answers
47 views

Default login for multiuser site in Safari

In Safari, is it possible to set a default user for a site for which you have multiple user accounts? Or sites that have different accounts for different subdomains? As it is, when I login, I have to ...
1
vote
0answers
78 views

Keychain stores localhost login information but won't automatically load them again

I have a macbook pro which I use for development. Keychain used to store and load my ID and PW for localhost:3000, but for some reason it has stopped loading them automatically. I have tried ...
1
vote
0answers
370 views

What is Migration Assistant doing when it transfers Keychains?

When Migration Assistant (or Setup Assistant) migrates Keychains, it successfully transfers most items as expected, but behaves (very) strangely with respect to the "Local Items" keychain. It appears, ...
1
vote
0answers
759 views

How do I migrate my Keychain's “Local Items” to a new Mac?

After preforming a Mavericks-Mavericks migration using Migration Assistant, I have a "Local Items" Keychain on my new machine in which many (perhaps most) items are out of date (using old passwords), ...
1
vote
0answers
5k views

Cannot log into iMessage or FaceTime from mac

I have two macs, and at some point one of them stopped being able to log into Messages ( just the apple account ) and FaceTime. The other mac worked fine, but was not using iCloud keychain ( at the ...
1
vote
0answers
282 views

Non-extractable private key in Keychain Access.app

The manual page for /usr/bin/security on OS X 10.9 indicates that there is a -x option for security import to specify that private keys are non-extractable after being imported. How is this ...
1
vote
0answers
143 views

How can I add an SMIME cert and configure iOS mail to use it?

In order to protect ourselves from NSA-style snooping, we need to start using SMIME encrypted email. Since I have over 10,000 BYOD devices to update, what is the most effective way to Deploy an ...
1
vote
0answers
367 views

When adding passwords to Keychain Access from command line NTLM is converted to MLTN

This is one of the weirdest things... I script adding passwords to Keychain Access when I log in to provide a "SSO" like experience. I use AppleScript to run some terminal commands that look like ...
1
vote
0answers
37 views

Is there any way to identify passwords in my keychains that haven't been accessed in a long time?

I'm a web developer and I deal with a lot of passwords. Many of these I only need for a short while and then never again. My login keychain has quickly grown to several hundred items. I do the ...
1
vote
0answers
578 views

Why does remote MacBook Pro on LAN disappear from Finder sidebar when I connect to it?

This is really odd. I've replaced ethernet cables and what not, but most of the time, when I try to connect to the MBP on my LAN, it will initially disappear from the sidebar before reappearing. The ...
1
vote
0answers
3k views

Keychain Access not revealing passwords

I was able to fix the problem by restarting my computer, but I wanted to see if anyone else had this issue. If I right click on a keychain item and select "Copy Password to Clipboard" the usual ...
1
vote
0answers
346 views

How can I find and remove duplicate Keychain entries

I want to cleanup Keychain before activating iCloud Keychain sync. How can I easily find duplicate Keychain entries?
1
vote
0answers
984 views

safari website requires a client certificate

I went to a site I regularly use and got this when logging in with Safari I seem to have 2 certificated of the same name both issued by Apple and both are not expired (found by searching in ...
1
vote
0answers
154 views

Prevent Mail.app from caching passwords in Keychain

I recently upgraded from 10.7 to 10.8, and noticed a behavior change in Mail.app. Previously, in 10.7, I told it not to save the password to my IMAP account, so every time I quit and restarted I was ...
1
vote
0answers
2k views

How to restore servers signed certificates and private keys?

Starting fresh install of OS X Server on myserver.example.com running Mountain Lion after having saved the private key, intermediate and public certificates on another computer. Now I want to ...
0
votes
0answers
11 views

Can I use our SSL certificate for digital mail signatures?

We have a GoDaddy SSL Certificate that we use on our OS X Server for securing some web sites and the Mail Service running on it. Our company website FQDN is one of the 5 named on that certificate but ...
0
votes
0answers
22 views

“Delete references & files” with keychain using security delete-keychain

I have a script that uses a keychain to store various privates keys and certificates into a certain keychain (different from login and System). I'd like to enable it to purge all the content of its ...
0
votes
0answers
8 views

Missing Items From KeyChain Dumps

I'm using the process outlined here to export my OS X keychain items to .csv files. After getting many blank .csv files, I adapted the script using this guy's suggestion. After making this change, ...
0
votes
0answers
48 views

Keychain back up is not working after restore

I use keychain swapping to play 2 accounts on a device {ipad1, ios 5.1.1}. This issue happened before but I gave up and restarted then but after months of play now, I am hoping to fix it this time. ...
0
votes
0answers
12 views

Stop keychain proposing to save my ssh passphrase

This is a minor inconvenience, but the security consequences could be problematic. I prefer to be prompted for my SSH key passphrase when I make a connection to remote systems, in order to minimise ...
0
votes
0answers
36 views

Add Keychain and computer crash

I'm trying to understand how Apple Keychain works. If I understand correctly, only passwords that are in the iCloud Keychain will be shared with my other devices and saved if I lose the computer. Is ...
0
votes
0answers
289 views

Cannot uncheck 'pending' iCloud keychain on both mobile and OSX

This is very frustrating. One day I wanted to try iCloud keychain. I turned that on without knowing I will be struck with it forever. I'm asked to verify with code which I can enter, then message to ...
0
votes
0answers
98 views

I don't know my keychain login password

My other computer is locked down because keychain is not accepting any passwords I have used. I can't even open finder at this point and none of the trouble shooting online is working.
0
votes
0answers
314 views

The L2TP-VPN server did not respond - OS X Mountain Lion (happened after change of Router)

I used to be able to connect to VPNgate's servers but ever since I changed to a new router (one of the new Netgear Nighthawks), it just stopped working. I followed the guide on their site to setup ...
0
votes
0answers
272 views

Invalid Root Certificate (Comodo RSA)

Regulary, a duplicate certificate of COMODO RSA appears on my keychain (Google Chrome?) and when I browse on a website which use a COMODO certificate. Google Chrome blocks the website. (Normal). I ...
0
votes
0answers
84 views

Is it possible to retrieve iCloud password from iPad that is currently logged in to iCloud?

With all of Apple's (and the rest of the world's) increased intrusions by hackers, I have become very nervous when the slightest glitch happens on any of my devices. I was working on my laptop and it ...
0
votes
0answers
97 views

OSX Yosemite, any program asking for Admin Access hangs

Any time I run anything that requires an Administrator password to install, the program hangs. It could be an installer, it's been Xcode, even Keychain Access. I've waited hours, but the dialog ...
0
votes
0answers
27 views

Mac Keychain Access search seemingly broken

Ever since additionally starting to use iCloud Keychain, my regular keychain access list has had multiple issues. The largest of which is that items I know are in there are no longer indexed by the ...
0
votes
0answers
64 views

How do I remove the fiddler certificate authority?

I used Fiddler as a proxy to my Mac to debug a tricky HTTPS problem. Now that I'm done I'd like to uninstall the certificate authority Fiddler uses to decrypt SSL traffic. I've tried using Keychain ...
0
votes
0answers
66 views

Deleted Keychain Access <key>

I was deleting some old AirPort items in Keychain Access, and somehow I managed to delete both public and private entries from the top of the list. I don't notice any problems with my machine, ...