the password management system in OS X

learn more… | top users | synonyms

3
votes
0answers
174 views

Why not have iCloud keychain as default?

Yosemite 10.10.1 and iOS 8.1.2 On my Keychain Access on OS X, I have the "login" default keychain and an "iCloud" keychain (I have iCloud Keychain ON for all my devices). I'm just wondering, could I ...
2
votes
0answers
193 views

Why does Keychain ask for the same password twice?

For security reasons, I have a different password on my keychain than my user account password. I have achieved this by opening Keychain Access.app, right-clicking on the Login keychain, choosing ...
2
votes
0answers
374 views

ssh asks for passphrase not keychain password after locking keychain

I'm using Yosemite and store the ssh passphrase in a separate keychain (not the login keychain). This all works fine as long as the keychain is unlocked. When I lock the keychain, I expected ssh to ...
2
votes
0answers
507 views

How to avoid display HTTPS certificate warning in Chrome

When I browse with Chrome on a web site that has an invalid certificate for some reason (eg my NAS Synology using HTTPS protocol) a warning message like the following Chrome appears to me: If I ...
2
votes
0answers
518 views

How to disable keychain completely in Mavericks?

Is there any way to completely disable keychain usage in Mavericks? We have a mac mini at work that we use in the conference room. The problem is that the keychain is not staying synced with Active ...
2
votes
0answers
164 views

Cisco IPSec forgets password (Mavericks)

Cisco IPSec seems to have no way to store the password of the connection permanently. I have found on the web some solutions for the Mountain Lion release, but none for OS-X Mavericks. Is it ...
2
votes
0answers
160 views

How can I revoke an applications access to keychain passwords from the command-line?

Applications can be granted permanent unprompted access to passwords. You can add and revoke these privileges using the Keychain Access utility. (See this answer) I'd like to be able to revoke from ...
2
votes
0answers
126 views

why would keychain access silently discard an S/MIME X.509 certificate?

A co-worker sent me some S/MIME signed email. With anyone else who has done this, the certificate has shown up in my login keychain. Not so with his. I wrote out the attached p7s file, and verified ...
2
votes
0answers
124 views

Where do certificates come from?

On my system when I check Keychain Access I often find new certificates. They get put there behind the scenes. Is that normal? When does this happen? Is there a way I can get alerted when a ...
1
vote
0answers
14 views

Internet Access after renew the expired com.apple.servermgrd certificate

I inherited some months ago a Mac mini server running OS X 10.8.5 Initially, I configured it with the new network settings, DNS name, etc and all was working fine in regard to file sharing, accessing ...
1
vote
0answers
35 views

Macbook Pro got stolen. Thief knows password. iCloud Keychain all compromised?

My Macbook was stolen. And I think the thief knows my Macbook's login (admin) password (not Apple ID). (I know, very stupid of me) Does that mean all my passwords stored in iCould Keychain are now ...
1
vote
0answers
36 views

Wanted, a way to change many keychain passwords at once

Problem: employer uses a common account (username and password) for numerous logins within their domain, and requires frequent password changes. Keychain can't seem to figure out that e.g. any ...
1
vote
0answers
248 views

View Keychain from encrypted IOS 8.2 backup?

Is there any way to access the keychain from an Iphone 5 IOS 8.2 backup? Here are the hard facts: encrypted backup where I KNOW the password device is lost So far I could restore all the ...
1
vote
0answers
329 views

Lost Wi-Fi passwords after reset network settings on iPhone

After a network configuration reset on my iPhone all Wi-Fi passwords were lost. They were stored in iCloud Keychain, synced with my Mac, where they disappeared too. This is very frustrating since it ...
1
vote
0answers
732 views

com.apple.WebKit.Networking.xpc wants to sign using key “privateKey” in your keychain

I've seen this error in a few other areas of the forums; however, I'm trying to understand what does "key 'privateKey'" means. I'm trying to authenticate to a VPN portal and this is the error that ...
1
vote
0answers
259 views

“Show Password” in Keychain Access doesn't work

I am having a problem, as a program is requesting my RSA password but my Mac won't let me see it. As I check the "show password" (mostrar contraseña) chechbox, it immediately unmarks itself. I ...
1
vote
0answers
385 views

OS X asking for local items keychain password

My mid-2010 macbook pro was running just fine on OS X 10.10, and then I decided to enable the guest account. My account still works fine, but when I login into the guest account, I get an annoying ...
1
vote
0answers
205 views

Keychain doesn't remember password for network drives

I have an MBP with Yosemite connected to my home network, and I want to automatically mount three hard drives located on a Windows 8 computer also connected to the network. When I connect using ...
1
vote
0answers
130 views

Guest User has keychain issues until I reboot

We have some systems used as general-purpose systems. We configured the systems to enable the Guest user; periodically, when trying to log into the system, a keychain notification pops up saying it ...
1
vote
0answers
169 views

Yosemite Keychain Access Not Showing Keychain List

I have Yosemite, and my Keychain Access only shows the login keychain, giving me no option to switch between keychains. As you can see, my sidebar on the left is missing. I try toggling it with ...
1
vote
0answers
368 views

“iCloud Keychain Was Reset” after every reboot

Everytime I reboot my mac (10.9.5), I get a notice that "iCloud Keychain Was Reset". I can set it up again without problems, but I shouldn't have to keep setting it up. What's going on?
1
vote
0answers
163 views

Change Managed, Mobile Account Password through script?

Wondering if anyone has worked with something similar before - we have a number of Mac laptops connected to an Active Directory server, and on first login users create a Managed, Mobile account. When ...
1
vote
0answers
91 views

SSH Public key access - my password is being stored somewhere?

I've just created a Public/Private key to access my server via SSH, this has all worked fine but I added a passphrase to the key when it was created. The first time I logged in via terminal and ...
1
vote
0answers
51 views

Default login for multiuser site in Safari

In Safari, is it possible to set a default user for a site for which you have multiple user accounts? Or sites that have different accounts for different subdomains? As it is, when I login, I have to ...
1
vote
0answers
81 views

Keychain stores localhost login information but won't automatically load them again

I have a macbook pro which I use for development. Keychain used to store and load my ID and PW for localhost:3000, but for some reason it has stopped loading them automatically. I have tried ...
1
vote
0answers
406 views

What is Migration Assistant doing when it transfers Keychains?

When Migration Assistant (or Setup Assistant) migrates Keychains, it successfully transfers most items as expected, but behaves (very) strangely with respect to the "Local Items" keychain. It appears, ...
1
vote
0answers
803 views

How do I migrate my Keychain's “Local Items” to a new Mac?

After preforming a Mavericks-Mavericks migration using Migration Assistant, I have a "Local Items" Keychain on my new machine in which many (perhaps most) items are out of date (using old passwords), ...
1
vote
0answers
5k views

Cannot log into iMessage or FaceTime from mac

I have two macs, and at some point one of them stopped being able to log into Messages ( just the apple account ) and FaceTime. The other mac worked fine, but was not using iCloud keychain ( at the ...
1
vote
0answers
311 views

Non-extractable private key in Keychain Access.app

The manual page for /usr/bin/security on OS X 10.9 indicates that there is a -x option for security import to specify that private keys are non-extractable after being imported. How is this ...
1
vote
0answers
149 views

How can I add an SMIME cert and configure iOS mail to use it?

In order to protect ourselves from NSA-style snooping, we need to start using SMIME encrypted email. Since I have over 10,000 BYOD devices to update, what is the most effective way to Deploy an ...
1
vote
0answers
419 views

When adding passwords to Keychain Access from command line NTLM is converted to MLTN

This is one of the weirdest things... I script adding passwords to Keychain Access when I log in to provide a "SSO" like experience. I use AppleScript to run some terminal commands that look like ...
1
vote
0answers
38 views

Is there any way to identify passwords in my keychains that haven't been accessed in a long time?

I'm a web developer and I deal with a lot of passwords. Many of these I only need for a short while and then never again. My login keychain has quickly grown to several hundred items. I do the ...
1
vote
0answers
607 views

Why does remote MacBook Pro on LAN disappear from Finder sidebar when I connect to it?

This is really odd. I've replaced ethernet cables and what not, but most of the time, when I try to connect to the MBP on my LAN, it will initially disappear from the sidebar before reappearing. The ...
1
vote
0answers
3k views

Keychain Access not revealing passwords

I was able to fix the problem by restarting my computer, but I wanted to see if anyone else had this issue. If I right click on a keychain item and select "Copy Password to Clipboard" the usual ...
1
vote
0answers
371 views

How can I find and remove duplicate Keychain entries

I want to cleanup Keychain before activating iCloud Keychain sync. How can I easily find duplicate Keychain entries?
1
vote
0answers
1k views

safari website requires a client certificate

I went to a site I regularly use and got this when logging in with Safari I seem to have 2 certificated of the same name both issued by Apple and both are not expired (found by searching in ...
1
vote
0answers
155 views

Prevent Mail.app from caching passwords in Keychain

I recently upgraded from 10.7 to 10.8, and noticed a behavior change in Mail.app. Previously, in 10.7, I told it not to save the password to my IMAP account, so every time I quit and restarted I was ...
1
vote
0answers
2k views

How to restore servers signed certificates and private keys?

Starting fresh install of OS X Server on myserver.example.com running Mountain Lion after having saved the private key, intermediate and public certificates on another computer. Now I want to ...
0
votes
0answers
4 views

Independently decrypt System.keychain using SystemKey file

From backup I've extracted (and I can extract any additional file) /var/db/SystemKey and /Library/Keychains/System.keychain I was able to unlock previously used Login.keychain with previous user ...
0
votes
0answers
29 views

How do you get a Cisco VPN connection to remember its password?

The Problem I've got a Cisco IPSEC VPN connection in my network settings on a Yosemite machine. It works fine, aside from prompting for a password on every single connection. The saved password is ...
0
votes
0answers
27 views

Can I use our SSL certificate for digital mail signatures?

We have a GoDaddy SSL Certificate that we use on our OS X Server for securing some web sites and the Mail Service running on it. Our company website FQDN is one of the 5 named on that certificate but ...
0
votes
0answers
60 views

“Delete references & files” with keychain using security delete-keychain

I have a script that uses a keychain to store various privates keys and certificates into a certain keychain (different from login and System). I'd like to enable it to purge all the content of its ...
0
votes
0answers
12 views

Missing Items From KeyChain Dumps

I'm using the process outlined here to export my OS X keychain items to .csv files. After getting many blank .csv files, I adapted the script using this guy's suggestion. After making this change, ...
0
votes
0answers
51 views

Keychain back up is not working after restore

I use keychain swapping to play 2 accounts on a device {ipad1, ios 5.1.1}. This issue happened before but I gave up and restarted then but after months of play now, I am hoping to fix it this time. ...
0
votes
0answers
15 views

Stop keychain proposing to save my ssh passphrase

This is a minor inconvenience, but the security consequences could be problematic. I prefer to be prompted for my SSH key passphrase when I make a connection to remote systems, in order to minimise ...
0
votes
0answers
39 views

Add Keychain and computer crash

I'm trying to understand how Apple Keychain works. If I understand correctly, only passwords that are in the iCloud Keychain will be shared with my other devices and saved if I lose the computer. Is ...
0
votes
0answers
451 views

Cannot uncheck 'pending' iCloud keychain on both mobile and OSX

This is very frustrating. One day I wanted to try iCloud keychain. I turned that on without knowing I will be struck with it forever. I'm asked to verify with code which I can enter, then message to ...
0
votes
0answers
146 views

I don't know my keychain login password

My other computer is locked down because keychain is not accepting any passwords I have used. I can't even open finder at this point and none of the trouble shooting online is working.
0
votes
0answers
400 views

The L2TP-VPN server did not respond - OS X Mountain Lion (happened after change of Router)

I used to be able to connect to VPNgate's servers but ever since I changed to a new router (one of the new Netgear Nighthawks), it just stopped working. I followed the guide on their site to setup ...
0
votes
0answers
370 views

Invalid Root Certificate (Comodo RSA)

Regulary, a duplicate certificate of COMODO RSA appears on my keychain (Google Chrome?) and when I browse on a website which use a COMODO certificate. Google Chrome blocks the website. (Normal). I ...