the password management system in OS X

learn more… | top users | synonyms

4
votes
0answers
240 views

Why not have iCloud keychain as default?

Yosemite 10.10.1 and iOS 8.1.2 On my Keychain Access on OS X, I have the "login" default keychain and an "iCloud" keychain (I have iCloud Keychain ON for all my devices). I'm just wondering, could I ...
2
votes
0answers
20 views

Grant rights on a certificate to an app through the shell

I'm currently looking for a way to grant an application rights to a certificate in my /Library/Keychains/System.keychain through the shell. I can currently do this through the Keychain Access App by ...
2
votes
0answers
148 views

Keychain popup freezes my safari when I visit specific sites

So I'm usually a chrome user, but ever since buying a macbook pro, I switched to safari because chrome drained my battery like mad and it generated too much heat. The transition wasn't bad, I actually ...
2
votes
0answers
349 views

Why does Keychain ask for the same password twice?

For security reasons, I have a different password on my keychain than my user account password. I have achieved this by opening Keychain Access.app, right-clicking on the Login keychain, choosing ...
2
votes
0answers
409 views

ssh asks for passphrase not keychain password after locking keychain

I'm using Yosemite and store the ssh passphrase in a separate keychain (not the login keychain). This all works fine as long as the keychain is unlocked. When I lock the keychain, I expected ssh to ...
2
votes
0answers
55 views

Default login for multiuser site in Safari

In Safari, is it possible to set a default user for a site for which you have multiple user accounts? Or sites that have different accounts for different subdomains? As it is, when I login, I have to ...
2
votes
0answers
617 views

How to avoid display HTTPS certificate warning in Chrome

When I browse with Chrome on a web site that has an invalid certificate for some reason (eg my NAS Synology using HTTPS protocol) a warning message like the following Chrome appears to me: If I ...
2
votes
0answers
434 views

Non-extractable private key in Keychain Access.app

The manual page for /usr/bin/security on OS X 10.9 indicates that there is a -x option for security import to specify that private keys are non-extractable after being imported. How is this ...
2
votes
0answers
181 views

How can I add an SMIME cert and configure iOS mail to use it?

In order to protect ourselves from NSA-style snooping, we need to start using SMIME encrypted email. Since I have over 10,000 BYOD devices to update, what is the most effective way to Deploy an ...
2
votes
0answers
589 views

How to disable keychain completely in Mavericks?

Is there any way to completely disable keychain usage in Mavericks? We have a mac mini at work that we use in the conference room. The problem is that the keychain is not staying synced with Active ...
2
votes
0answers
202 views

How can I revoke an applications access to keychain passwords from the command-line?

Applications can be granted permanent unprompted access to passwords. You can add and revoke these privileges using the Keychain Access utility. (See this answer) I'd like to be able to revoke from ...
2
votes
0answers
147 views

why would keychain access silently discard an S/MIME X.509 certificate?

A co-worker sent me some S/MIME signed email. With anyone else who has done this, the certificate has shown up in my login keychain. Not so with his. I wrote out the attached p7s file, and verified ...
1
vote
0answers
35 views

Can I import my S/MIME cert in OSX 10.11.1

I try to create own CA and sign created certificates according to procedure described here: serverfault: Can I Create My Own S/MIME Certificate for Email Encryption? It works perfectly on my Linux ...
1
vote
0answers
32 views

Certificate Assistant 5.0 CSR Error

I am trying to create a certificate for someone else with a CA I created in Certificate Assistant. However, certificate assistant will no open the CSR generated by the user. I receive the following: ...
1
vote
0answers
19 views

Save password for custom keychain

I get this keychain promt after every reboot. Can I just set the password somehow, so I don't have to enter it again?
1
vote
0answers
82 views

Cannot reset default keychain

I recently forgot my login password, and had to change it through utilities and terminal. The problem is, after changing the password, the keychain access keeps asking for the "Local items" keychain ...
1
vote
0answers
476 views

How can I change Keychain permissions without being physically present?

According to Apple's Documentation, for certain operations, the user must be physically present. However, I am trying to administer a Xcode Server build box via Screen Sharing, and I can't add or ...
1
vote
0answers
85 views

Fix behaviour of «* wants to use your * keychain»

I have my keychain set to lock when sleeping. So when I unlock my computer after not using it for some time, I get a bunch of password prompts like «* wants to use your * keychain» for Mail, ...
1
vote
0answers
142 views

Cannot export private key from System.keychain with Keychain Access or command line

I'm trying to export a private key from System.keychain in Keychain Access. I've tried running Keychain Access as a root. No matter what, I always get the following error. When I try to export the ...
1
vote
0answers
67 views

Internet Access after renew the expired com.apple.servermgrd certificate

I inherited some months ago a Mac mini server running OS X 10.8.5 Initially, I configured it with the new network settings, DNS name, etc and all was working fine in regard to file sharing, accessing ...
1
vote
0answers
117 views

Macbook Pro got stolen. Thief knows password. iCloud Keychain all compromised?

My Macbook was stolen. And I think the thief knows my Macbook's login (admin) password (not Apple ID). (I know, very stupid of me) Does that mean all my passwords stored in iCould Keychain are now ...
1
vote
0answers
89 views

Wanted, a way to change many keychain passwords at once

Problem: employer uses a common account (username and password) for numerous logins within their domain, and requires frequent password changes. Keychain can't seem to figure out that e.g. any ...
1
vote
0answers
964 views

Cannot uncheck 'pending' iCloud keychain on both mobile and OSX

This is very frustrating. One day I wanted to try iCloud keychain. I turned that on without knowing I will be struck with it forever. I'm asked to verify with code which I can enter, then message to ...
1
vote
0answers
929 views

Lost Wi-Fi passwords after reset network settings on iPhone

After a network configuration reset on my iPhone all Wi-Fi passwords were lost. They were stored in iCloud Keychain, synced with my Mac, where they disappeared too. This is very frustrating since it ...
1
vote
0answers
836 views

OS X asking for local items keychain password

My mid-2010 macbook pro was running just fine on OS X 10.10, and then I decided to enable the guest account. My account still works fine, but when I login into the guest account, I get an annoying ...
1
vote
0answers
911 views

The L2TP-VPN server did not respond - OS X Mountain Lion (happened after change of Router)

I used to be able to connect to VPNgate's servers but ever since I changed to a new router (one of the new Netgear Nighthawks), it just stopped working. I followed the guide on their site to setup ...
1
vote
0answers
516 views

Keychain doesn't remember password for network drives

I have an MBP with Yosemite connected to my home network, and I want to automatically mount three hard drives located on a Windows 8 computer also connected to the network. When I connect using ...
1
vote
0answers
162 views

Guest User has keychain issues until I reboot

We have some systems used as general-purpose systems. We configured the systems to enable the Guest user; periodically, when trying to log into the system, a keychain notification pops up saying it ...
1
vote
0answers
1k views

Restore an older version of iCloud keychain

I saved an important password in an iCloud keychain, then deleted it there, and then forgot the password. Pretty dumb, I know. Still, is it somehow possible to get an older version of that keychain ...
1
vote
0answers
212 views

Yosemite Keychain Access Not Showing Keychain List

I have Yosemite, and my Keychain Access only shows the login keychain, giving me no option to switch between keychains. As you can see, my sidebar on the left is missing. I try toggling it with ...
1
vote
0answers
462 views

“iCloud Keychain Was Reset” after every reboot

Everytime I reboot my mac (10.9.5), I get a notice that "iCloud Keychain Was Reset". I can set it up again without problems, but I shouldn't have to keep setting it up. What's going on?
1
vote
0answers
240 views

Change Managed, Mobile Account Password through script?

Wondering if anyone has worked with something similar before - we have a number of Mac laptops connected to an Active Directory server, and on first login users create a Managed, Mobile account. When ...
1
vote
0answers
122 views

SSH Public key access - my password is being stored somewhere?

I've just created a Public/Private key to access my server via SSH, this has all worked fine but I added a passphrase to the key when it was created. The first time I logged in via terminal and ...
1
vote
0answers
96 views

Keychain stores localhost login information but won't automatically load them again

I have a macbook pro which I use for development. Keychain used to store and load my ID and PW for localhost:3000, but for some reason it has stopped loading them automatically. I have tried ...
1
vote
0answers
591 views

What is Migration Assistant doing when it transfers Keychains?

When Migration Assistant (or Setup Assistant) migrates Keychains, it successfully transfers most items as expected, but behaves (very) strangely with respect to the "Local Items" keychain. It appears, ...
1
vote
0answers
547 views

When adding passwords to Keychain Access from command line NTLM is converted to MLTN

This is one of the weirdest things... I script adding passwords to Keychain Access when I log in to provide a "SSO" like experience. I use AppleScript to run some terminal commands that look like ...
1
vote
0answers
45 views

Is there any way to identify passwords in my keychains that haven't been accessed in a long time?

I'm a web developer and I deal with a lot of passwords. Many of these I only need for a short while and then never again. My login keychain has quickly grown to several hundred items. I do the ...
1
vote
0answers
701 views

Why does remote MacBook Pro on LAN disappear from Finder sidebar when I connect to it?

This is really odd. I've replaced ethernet cables and what not, but most of the time, when I try to connect to the MBP on my LAN, it will initially disappear from the sidebar before reappearing. The ...
1
vote
0answers
4k views

Keychain Access not revealing passwords

I was able to fix the problem by restarting my computer, but I wanted to see if anyone else had this issue. If I right click on a keychain item and select "Copy Password to Clipboard" the usual ...
1
vote
0answers
488 views

How can I find and remove duplicate Keychain entries

I want to cleanup Keychain before activating iCloud Keychain sync. How can I easily find duplicate Keychain entries?
1
vote
0answers
1k views

safari website requires a client certificate

I went to a site I regularly use and got this when logging in with Safari I seem to have 2 certificated of the same name both issued by Apple and both are not expired (found by searching in ...
1
vote
0answers
167 views

Prevent Mail.app from caching passwords in Keychain

I recently upgraded from 10.7 to 10.8, and noticed a behavior change in Mail.app. Previously, in 10.7, I told it not to save the password to my IMAP account, so every time I quit and restarted I was ...
1
vote
0answers
3k views

How to restore servers signed certificates and private keys?

Starting fresh install of OS X Server on myserver.example.com running Mountain Lion after having saved the private key, intermediate and public certificates on another computer. Now I want to ...
0
votes
0answers
31 views

How to make OS X save password in the default keychain?

I have been using the Mac OS keychain since it was created with Mac OS 8.6 and I collected almost 4000 items. My default keychain has a different name than "login" and than my user name, and I moved ...
0
votes
0answers
34 views

Keychain won't let me Allow or Always Allow after 10.11.1 update 5

I am having the same problem described in this question: Keychain won't let copy passwords after 10.11.1 update The difference is, I do not have any of the listed "helper" applications ...
0
votes
0answers
18 views

Can Keychain use the same credentials for multiple sites?

I'm working in an enterprise environment in which one password is used across a number of different websites. Changing my password is painful, because it has to be re-entered for each site. Too many ...
0
votes
0answers
69 views

Endless password prompts when trying to export (or otherwise change access) of private key in Mac Mini

I am trying to export certificate and private key into PKCS #12 file (.p12) using Keychain Access.app. The key and associated certificates do exist and I can use them from terminal using codesign for ...
0
votes
0answers
10 views

Remembered Networks from keychain

I recently was trying to fix my iPhone and was told that resetting my "Network Settings" might help. I did not know at the time that it would delete all of my remembered wifi networks. Is there ...
0
votes
0answers
592 views

There was an error connecting to Apple ID server

I am trying to login to iTunes App Store or the Mac App store on my Mac but it gives me the error every time "There was an error connecting to Apple ID server". Till now I have : Removed all the ...
0
votes
0answers
18 views

Is there a way to remove all revoked certs from Keychain Access

That does not involve manually doing it. I.e. some sort of command line tool/script