I just can't find a way to delete the Self-Signed Root CA from Keychain under System.

When I open KeyChain I select System under System Keychains. Then I click on the File in menu and then click on Unlock Keychain "System"...

After this I was expecting to be able to delete a certificate. But when I select a certificate I can only see greyed out Delete option in the Edit in the menu.

I tried to disable SIP (which was successful) but it did not help me clear From Keychain file (SystemRootKeychain) which is:


I disabled SIP in Recovery mode with command: csrutil disable

Any advice?

  • What "self-signed certificate"? What would SIP have to do with it? Mar 2 at 20:33
  • I checked additional details and it's Root Internal Certificate which was needed for specific Wi-Fi Enterprise network connection. Now the connection to the Wi-Fi network is possible without this certificate so I want to delete it. I found info about SIP here: discussions.apple.com/thread/7357200
    – Mi1anovic
    Mar 3 at 7:20
  • I’m going to edit the post and answer so the clarified problem is all in the question and the solution is about where to look for others. Great resolution !
    – bmike
    Apr 2 at 14:18

1 Answer 1


I was able to delete it with terminal command:

sudo security delete-certificate -c "CERT_NAME" /Library/Keychains/System.keychain

It was not clear to look in /Library/Keychains instead of /System/Library/Keychains so SIP was an unrelated complication to get to the source of the item.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .