the password management system in OS X

learn more… | top users | synonyms

16
votes
3answers
21k views

How can I add a private key to my keychain?

I am trying to add myRepositoryKey to my Mac keychain utility so . I exported this item in OpenRSA format from Putty. When I try to use Import Items, the file is unselectable. What do I need to do to ...
14
votes
5answers
7k views

Cannot unlock password protected SSH key in OS X Mavericks

I just upgraded to OSX 10.9, and when trying to establish an SSH connection with public key authentication, a prompt appears asking for my SSH key password. I initially thought that the upgrade ...
12
votes
4answers
3k views

How is the System Keychain secured in OS X?

I'm looking for something either like this security white paper for iOS except for OS X or even better, some kind of security audit report from an independent expert. After reading through ...
11
votes
1answer
222 views

How can I disable SSH KeychainIntegration in OS X Mavericks?

I'm having some issues with SSH KeychainIntegration in OS X Mavericks. I've tried poking around Apple's support site, but haven't seen anyone having my issue. I have seen lots of people who ...
9
votes
1answer
7k views

Safari can't connect to https

Safari suddenly can't connect to any HTTPS site because it "can't establish a secure connection". This is on an administrator account, not a managed account. A different administrator account is ...
8
votes
3answers
418 views

How can I figure out which keychain entries a process wants access to

I'm getting really tired of seeing this: As I understand it, ubd (the Ubiquity daemon) is responsible for the “Documents and Data” portion of iCloud's syncing. However, all of my iCloud-related data ...
7
votes
1answer
3k views

How do I remove many system roots from Apple System Keychain?

The Apple keychain application will not let you remove system roots, it will only allow you to disable them. It will only allow you to disable them one at a time. For each one, you need to go through ...
6
votes
2answers
135 views

Make my password protected SSH key expire or timeout after a while

I have a private SSH key I use for authentication that is stored in *~/.ssh/id_rsa*. When I ssh into a server, I am prompted for the password to unlock the key: I like this. I also like that I can ...
6
votes
2answers
2k views

How do I get com.apple.servermgrd to use a non-self-signed SSL certificate?

I have received a valid SSL certificate for my Mountain Lion Server (10.8.2 Build 12C3104) and have installed that cert for use by all services (and SSL and other services do not pop up the "Verify ...
6
votes
1answer
8k views

Should time machine backups be encrypted

I am new to the Mac and was setting up my Time Machine. However, it seems Time Machine also backs up information in the keychain. I was wondering if that means I should use an encrypted disk to store ...
6
votes
5answers
1k views

Why are Safari and Chrome not throwing warnings after removing the root certificates

Certificates issued by DigiNotar have been blacklisted today by Mozilla. Viewing websites with certificates issued by DigiNotar with a nightly build of Firefox will render warnings. Instead of ...
6
votes
1answer
627 views

How does keychain restore work in other idevice?

app A stores passwords in keychain programmatically. One password is stored in one keychain item. Keychain item is a class of type Generic Password. app A is installed & used in idevice1 & ...
5
votes
2answers
3k views

Move items from old keychain to new keychain

I've just done a clean Mountain Lion install, and one thing bothers me a lot: How can I move passwords from my old keychain to the one created by the installer when it performed a clean install ...
5
votes
1answer
153 views

Saved passwords in Safari keep coming back

So I had saved some some passwords in my Safari on my Mac (Mavericks). I went to Safari > Preferences > Passwords > Remove All to remove all the stored passwords. But no matter how many times ...
5
votes
1answer
1k views

Selectively disable iCloud keychain syncing for WiFi passwords

I have iCloud Keychain sync enabled, but I want to stop it syncing WiFi passwords. I have a portable WiFi hotspot which I use for my laptop and iPad, but I don't want my iPhone to connect to it since ...
5
votes
2answers
368 views

Enable a CRL endpoint for my CA in Keychain Access

I have a Certificate Authority and I'd like to configure CRL. Is there a way to do this in Keychain Access? (I am running OS X Server).
5
votes
2answers
5k views

What is accountsd and why does it want to use the “login” keychain?

Periodically, I'm seeing this keychain dialog pop up: I click 'Cancel', then it pops up again, then I click 'Cancel' again, and it goes away for a while. (Maybe an hour or two, I haven't timed ...
5
votes
1answer
1k views

What prevents export of a private key from Mavericks keychain?

In Mac OS X Mavericks, I'm not able to export a private key from keychain. I'm getting the following error message: /* In dark wake, no UI possible */ Searching it in Apple documentation fetched the ...
5
votes
1answer
5k views

OS X Keychain keeps prompting me for my SSH passphrase even though I save it (OS X 10.6.8) [duplicate]

Every time I log in to a remote server with SSH, OS X keychain prompts me to remember the SSH passphrase. I type in the passphrase and check the box to remember it. I then connect ok to the server but ...
5
votes
2answers
187 views

Can I make unlocking the screensaver also unlock the login keychain?

I have the screen saver on my Mac password protected, but unlocking the screen saver does not unlock the login keychain. I know this because I get asked to unlock the login keychain shortly after ...
4
votes
4answers
776 views

How to fix curl: (60) SSL certificate: Invalid certificate chain when using sudo

So since the Mavericks upgrade curl has more issues with certificates. When trying to curl a file from my web server with it's self-signed certificate it was getting the error "SSL Certificate: ...
4
votes
2answers
2k views

Is there any way to crack a password-protected disk image?

I have created a .dmg file with password. Unfortunately I forgot the password and I my Google searches have not resulted in a way to reset the password of this .dmg file. Please help me find a ...
4
votes
2answers
12k views

How can I retrieve a saved WiFi password from iOS 7?

I have some wireless networks that I joined on my iOS device and I now want to retrieve the passwords from the device. How can I (by hook or crook if necessary) get into the iOS 7 keychain and obtain ...
4
votes
2answers
217 views

Mail on OS X: Choose which X.509 certificate to use for signing mails

I've got multiple X.509 certificates from different CA's for different purposes -- for example, one from CAcert.org, and another one from my university. Both have different advantages and ...
4
votes
4answers
2k views

OSX ssh-agent: no password pasting, and problem with PKCS#8?

I use ssh on my machine, and have set up a long not-human-friendly passphrase which is saved in my password manager. What makes me crazy every time is that I cannot paste into the window pictured ...
4
votes
2answers
1k views

Keychain won't remember my SSH password when connecting to server

I routinely develop on two different servers. One server requires my private SSH key stored in ~/.ssh/id_rsa. This part of the story works fine. The other server should not require any SSH keys, yet ...
4
votes
1answer
103 views

My mother changed her session password and now the system can't unlock the “login” keychain

The title says most of it. My mother changed her password through the Accounts pane of System Preferences to a lengthy one (17 characters) about three weeks ago. Then, the next day, she left for ...
4
votes
1answer
4k views

Import certificates into System Keychain via the command line

Is it possibly to copy a certificate to machine running to OS X Snow Leopard, add it to the System Keychain, then set it to "Always Trust via SSH?" And if so... how?
4
votes
1answer
149 views

Can the OS X keychain juggle two accounts for the same site?

I have a different passwords for: www.example.com/foo/login and www.example.com/bar/login It seems as if the keychain only saves the passwords in relation to the sitename as it does not make ...
4
votes
1answer
252 views

How to move the /Users to an encrypted ZFS drive?

When setting up a ZFS pool on an encrypted CoreStorage volume, a manual typing of the password is required each time for mounting the volume (due to the problem of OS X thinking that the password is ...
4
votes
1answer
4k views

How can I permanently add my SSH private key to Keychain so it is automatically available to ssh?

It seems that ssh-add -K ~/.ssh/id_rsa will load your key but will ask for the password each time you reboot. I am looking for a solution that would not require me to re-enter the key password ...
4
votes
0answers
54 views

Google chrome wants to use the keychain password frequently [duplicate]

Google chrome wants to use the keychain password frequently in my mac system(OSX version 10.9.2). Before updating the OS to new version, the applications like Textedit, Preview are used to ask the ...
3
votes
1answer
4k views

Is it possible to view passwords through Terminal?

Does anyone know how to view passwords in Terminal? Maybe by accessing the Keychain data or something? I want to be able to view passwords in Terminal with just a series of commands.
3
votes
4answers
677 views

Off-site backup of “login.keychain”

I’m using the Keychain.app to manage all my (website) passwords, and I am also using the “Password assistant” to generate secure random passwords. But obviously I’m paranoid that my laptop is lost or ...
3
votes
2answers
1k views

Warning: “CSUserAgent wants to access data stored in your keychain.”

For my backups I use an encrypted external hard disk. This hard disk has two partitions (names are: Backup, Private). Today, when connecting the backup I was prompted with the following message: ...
3
votes
1answer
2k views

How safe is iCloud Keychain?

Say I installed a malicious app on my iPhone that stole my iCloud password. Can the Keychain be compromised ? Basically, can the keychain passwords be accessed by solely having the iCloud password ? ...
3
votes
1answer
5k views

Repeated pop-ups 'Safari wants to use the “login” keychain'

I get repeated pop-ups saying I then enter the password But the system always keeps on telling me it's the wrong password, which I'm sure it's not This is what the Details reveal: What is ...
3
votes
3answers
519 views

Problem with ssh agent

I'm having a problem using ssh agent to make sure I don't have to enter a password each time a certain program uses my id_rsa private key. I did ssh-add -K ~/.ssh/id_rsa and it seemed to add an entry ...
3
votes
1answer
52 views

Visualizing Keychain Item Details

I'm a developer working on doing some keychain related features. A piece of my application changes / looks for items in the keychain. However, visually verifying some of these changes can be difficult ...
3
votes
1answer
25 views

iCloud Keychain - view online

Is there any way of viewing the contents of your iCloud Keychain online? After a computer failure, I have no access to my keychain items! I have another laptop running Snow Leopard, but it is not ...
3
votes
1answer
195 views

Why am frequently asked for access to my Keychain?

Since using Migration Assistant to move from an old iMac (2009) to a new MacBook Pro, I find that I'm repeatedly asked for access to my Keychain. Prior to moving to the new machine, once I unlocked my ...
3
votes
1answer
1k views

Ubiquity process root certificate not valid

What are com.apple.ubiquity.... certificates in keychain? I have three of them and the Keychain access warns me that their root certificates are invalid. I previously had little snitch asking me about ...
3
votes
1answer
298 views

What's the best way to login to remote servers?

I'm currently logging in to a remote server by opening terminal, starting ssh-agent, adding a key, launching xterm and then connecting via ssh. What tools should I be using for this? I've looked at ...
3
votes
2answers
763 views

Access to Keychain items is restricted

I recently had to reinstall the OS on my MacBook Pro. I used MobileMe to sync a bunch of my settings back to my computer (including Keychains), and now I can't see any of my Keychain passwords. If I ...
3
votes
1answer
99 views

Encrypted external drive always prompts for password, despite being in keychain

I have an external encrypted drive, and every time I plug it in, it'll ask me for the password, even though it's already in my keychain. If I type the password in, it'll mount as expected. Oddly, if I ...
3
votes
1answer
517 views

How to make global keychain in Mac OS X Lion

I need to create a keychain that can be used by any user. When I check a keychain as shared in Keychain Acess->Edit->Keychain List, it just disappears and I can't see this keychain in the list ...
3
votes
1answer
91 views

Keychain prompt - Switch to other window via keyboard

Whenever the Keychain prompt pops up, the window has the focus, and I haven't found a way to switch away from it via the keyboard. I know entering my password dismisses the window, but sometimes I'm ...
3
votes
0answers
641 views

SSH, passphrases, keychains, Could not open a connection to your authentication agent

I will be very surprised if anyone has the answer to this. I have googled for a long time but no luck. As an iOS developer who will shortly be welcoming a new team member I want to set up a ...
2
votes
4answers
127 views

Does Console.app also log passwords?

I'm a newb of OS X (or any flavor of *Nix for that matter) so this came to mind lately.. As the Console.app logs every single process that's running, does to also mean passwords & such are also ...
2
votes
1answer
612 views

Keychain error -25308 while trying to add drive to Time Machine

I am trying to configure my Mac to use a time-capsule for Time Machine. After entering in the Time Capsule password I get the following error: Keychain error -25308 occurred while creating a ...