Questions tagged [keychain]
The password management system in macOS
776
questions
0
votes
0answers
9 views
Load .pem certificate to Apple KeyChain
When I drag my .pem certificate to the Apple Keychain it shows me "An error occurred. The content of this file cannot be recovered". Also I tried to double-click the .pem file but show me ...
1
vote
0answers
8 views
Proxy user/password setting in System Settings apparently ignored
Using macOS Catalina 10.15.2, I observe the following behavior: I open System Preferences, Network, the network I am on (only tested Ethernet thus far), Advanced, Proxies, Web Proxy (HTTP). I enable ...
0
votes
0answers
9 views
MacOS keeps asking for SMB password
Whenever I (re-)mount a SMB share, Mojave prompts me for my credentials. I faithfully enter my data, hit the "store in keychain" checkbox ("Password im Schlüsselbund speichern" in ...
3
votes
1answer
25 views
Restoring `System.keychain` from a Time Machine backup without access to system `/var/db/SystemKey`
I have an old backup that (hopefully) holds the encryption keys to some encrypted disks in the System.keychain. To unlock that properly, I seem to need the /var/db/SystemKey that does not seem to be ...
2
votes
0answers
27 views
How to save all keychain passwords and restore them on a wiped computer?
Once again I ran out of space so I am about to wipe the hard disk of my macbook pro to restart from a clean slate. I have taken a full backup of my home directory to an external hard disk, using rsync ...
0
votes
0answers
14 views
Bash Command to Export System-Roots Certificates in Mac
I am trying to write a script to export all the system-roots-certificates from Keychain Access -> System Roots -> Certificates to a path as cert.pem file. When i tried the below command it did not ...
0
votes
0answers
7 views
Cannot set ups mail client on High Sierra network account
i have Mac High Sierra server running. I successfully set up DNS, OD and Mail services. Now i'm trying to set up mail on aHS client machine. Here is the problem: if i do it on local account it works ...
0
votes
0answers
21 views
Recover email account saved on iPhone
Sorry if this is not the right place to post this question.
I've a Gmail account configured in my iPhone and I can send and receive emails. Problem is, I can't remember the password so I cannot login ...
0
votes
0answers
13 views
OneNote attempts to open on OneNote on Mac but under a different account
Odd title but please bear with me on this!
I have a O365 Business account with 2 users with active Microsoft 365 Business Basic
(formerly Office 365 Business Essentials) licenses. The issue exists ...
1
vote
1answer
16 views
What sorts of apps should I grant Keychain access to?
Some apps ask me for Keychain access when installing them, configuring them, and/or using them. As with anything related to computer access, permissions and security, giving the app access could be a ...
0
votes
0answers
12 views
Blocking Keychain access permanently for an app
I am using Parallels Desktop 15.1.2 with it's toolbox on my Machine. The toolbox contains several useful utilities which I use on daily basis. An annoying dialog appears, prompting for "KeyChain ...
2
votes
1answer
19 views
Automatic certificate creation?
To add 3rd party plugins in Xcode, one should create their own certificate and to sign Xcode with it. But self-signed certificates expire after 1 year. How can I make specific code to be executed ...
0
votes
0answers
182 views
What is 'beaconstore' and 'beaconstorekey' in the Mac keychain?
I noticed that after updating my Mac to the newest version of Catalina last night a new keychain entry titled 'beaconstore' has appeared, after inspecting the only other info I could find was that it ...
0
votes
0answers
14 views
Touch ID not recognized by app
I recently changed my password on my MacBook Pro. Normally, the password change does not introduce any additional complications. This time, something went wrong. For example, I was signed out from all ...
0
votes
0answers
6 views
How can I use a certificate from the keychain to sign e-mail on iOS?
My logon keychain contains a certificate for signing e-mail. I can use this certificate in Mail.app or Outlook 365 on the Mac in order to sign outgoing mail.
On the iPhone or on the iPad, the ...
0
votes
0answers
27 views
Fail to move proxy credentials item from login keychain to system keychain in Catalina
when defining system proxy from system preferences->network->proxies It keeps the credentials in login keychain which is only good for current user, and I'd like to have seamless access for all ...
0
votes
0answers
16 views
Recover auto-generated Time Machine pasword?
I've reinstalled my 2015 MacBook Pro recently. Before that, I've created a full Time Machine backup to my local NAS with an automatically generated password.
Unfortunately, I cannot find this ...
1
vote
0answers
11 views
sharingd wants to use the “.kc328-0” keychain
I was helping a coworker solve an issue with Xcode and followed these instructions https://stackoverflow.com/questions/24023639/xcode-command-usr-bin-codesign-failed-with-exit-code-1-...
0
votes
0answers
38 views
Does Keychain support importing a PKCS12 certificate encrypted with AES256?
I am attempting to import a PFX/P12 certificate generated by the Windows certificate manager for use with S/MIME into MacOS Catalina Keychain. The certificate is encrypted with AES256.
The same ...
0
votes
0answers
23 views
Root CA certificate invalid on Mac
I have a root certificate authority file that works on Windows computers, but it is not accepted on Macs since macOS Catalina.
The file was imported into Keychain and marked as trusted in its ...
1
vote
2answers
401 views
Client certificate authentication fails with iOS 13.4.1 (works with 13.2.2)
I've previously posted this question and since then further investigated the issue.
The problem seems to be the latest iOS (13.4.1), which fails to send the client certificate upon authentication ...
0
votes
0answers
11 views
How to prompt Key Chain Access to retrieve credentials
The website https://ritx-fl-sales.bswa.net requires a username and password. Credentials were saved to Keychain Access.
Within Safari (OSX), I was expecting to be prompted to select the credentials ...
2
votes
1answer
43 views
Where to find the keychain stored by KeychainSwift
I use KeychainSwift to store my user's keychain data using my created iOS app.
The question is:
Where can I see the data it stored?
I already tried going to
Settings -> Password & ...
0
votes
0answers
24 views
How to fix “ssh_exchange_identification: Connection closed by remote host”
I'm trying to connect to remote Macs via ssh.
I can connect to one Mac without a problem but on a second Mac (in the same LAN) I get this error:
RD:/ ruisi$ ssh -v rui@192.168.1.32
OpenSSH_7.9p1,...
0
votes
1answer
36 views
iPhone XS: s/mime signature doesn't contain the issuer (intermediate) certificate in signed emails
I'am using a valid s/mime certificate to sign my emails on my Mac Book Pro and my iPhone XS. When I sign the email from within the mail program on Mac Book Pro, the signature contains the certificate ...
4
votes
1answer
81 views
Does Apple save a (hashed) version of my device passwords?
As earlier described in this question, I was asked today by my iPad to enter the user account password of my MacBook, and my MacBook later asked me to provide the passcode of my iPad. I'm specifically ...
2
votes
0answers
189 views
“Safari can't establish a secure connection” and OmniFocus sync is broken
Symptoms
macOS 10.14.6, Safari 13.1, all updates applied.
Safari refuses to connect to some websites.
Safari Can't Open the Page [...] because Safari can't establish a secure connection to the ...
4
votes
1answer
2k views
How to import Chrome passwords into iCloud Keychain
Latest MacOS release (10.15.4) added the following option:
Option to import Chrome passwords into your iCloud Keychain for easy AutoFill of your passwords in Safari and across all your devices
...
1
vote
0answers
164 views
How do I use ssh agent on MacOS Catalina like OS X El Capitan used to?
I recently upgraded from OS X El Capitan to MacOS Catalina. I am accustomed to keeping my login session open for an entire week, and I was able to use a passphrase-protected ssh key by entering the ...
1
vote
1answer
29 views
Generate Keychain password when MacOS doesn't prompt?
When signing into Skype, the password fields don't offer the Keychain password-generation option. Is there anyway to generate a password and store it manually in Keychain?
I need keychain to remember ...
1
vote
1answer
33 views
Creating SHA-2 certificate using keychain assistant
I am trying to enable https on my localhost (for testing). Using Keychain Assistant, I have created both a self-signed CA and a certificate issued by that same CA. I have enabled trust on the CA in ...
3
votes
1answer
62 views
Make /usr/bin/security ask for Touch ID verification
I can add a password to the keyring like this:
security add-generic-password -a $USER -s my-password-entry -T /usr/bin/security -U -w
... and read it like this:
security find-generic-password -a $...
0
votes
1answer
164 views
MacOS keeps asking for System Keychain
Keeps asking me for my keychain password. Here's what I've tried!
Reset my default keychains
Enter my login password
Says "Created a new empty “login” keychain with no password. Please change ...
1
vote
1answer
365 views
Keychain Access Webform Passwords Greyed Out
Trying to export Keychain Access webform passwords. When I select one, the export option is greyed out. It doesn't matter which one I select, they are all greyed out and cannot be exported. How can I ...
3
votes
2answers
393 views
How to avoid macOS for keep asking for the passphrase for key ~/.ssh/id_rsa while remotely operating via ssh?
If I remotely log on to a Mac via SSH and then use it to access another machine (such as doing a git pull) via SSH, it will keep asking me for the passphrase for key ~/.ssh/id_rsa.
If I operate on ...
0
votes
0answers
26 views
security commandline tool to prompt for password while also specifying a keychain
Is it possible to use the security commandline tool to create an entry in a specific keychain while also prompting the user to enter a password?
The usage string is:
Usage: add-generic-password [-a ...
0
votes
1answer
65 views
how to use fingerprint id to sign in to apple ID
When updating my Mac, I often get a password popup like the following.
Why does the keychain not remember my password from the last 100 times I entered it. And why does it not offer me the ...
3
votes
3answers
125 views
Checking Certificates Meet Apple Requirements
is there a command or UI I can use to test certificates or diagnose why they aren't valid?
A while back Apple changed the requirements for TLS certificates, and announced dates from when those ...
0
votes
0answers
28 views
How to remove all keychain entries an app created from iPhone?
It seems that when an app creates keychain entries, these entries remain in the keychain even after the app is deleted.
Afaik this behaviour was changed in ios11.3 beta, but the change was reverted ...
2
votes
0answers
47 views
How proxy authentication works before first user login?
For the creation of a tool which make uses of system proxy preferences, I am trying to understand their keychain usage:
From my current understanding, on MacOS (Catalina) the system preferences for ...
0
votes
0answers
23 views
Is there a way to (re)generate a keychain password so that it contains two numbers?
I am creating an account that requires a password with at least two numbers. I would like to use Apple suggestions of keychain strong passwords but it is generating only passwords with one number.
...
1
vote
1answer
59 views
How to retrieve a password from Keychain command-line?
According to many pages, it should be easy to retrieve command line a password using security.
I tried several options without success:
$sudo security list-keychains
"/Library/Keychains/...
0
votes
1answer
452 views
cannot sign iOS app in XCode - in a catch 22
I have built then Archived my iOS app now need to submit to Validate and push to app store
xcode says this on main page when checkmark off Automatic signing ... so do manual sign
then picked ...
0
votes
0answers
16 views
cannot paste my metadata keychain password
I am following the steps in How do I stop 'mdwrite wants to use the "metadata" keychain' prompts?
But having a problem, I am unable to type the crazy password into the system dialog ...
0
votes
0answers
16 views
Saving a password in keychain and Google Chrome at the same time? [duplicate]
I've searched everywhere for an answer to this, but I can't find one. Is it possible to save passwords into my Keychain when setting up user accounts in Google Chrome? It sounds like I may have to ...
3
votes
0answers
963 views
Sharing Keychain in Chrome [duplicate]
Is it possible to configure Keychain to share passwords in Chrome on OS X Catalina?
The problem I face is that some websites function better in Chrome than Safari and I would like to be able to switch ...
1
vote
1answer
449 views
Where does the huge amount of “<unknown>” iCloud Keychain items come from and what is their purpose?
I just discovered that there is a huge amount (hundreds) of items in my iCloud Keychain that I can not explain. They were all created starting from 7th of January up until 13th January.
When I right-...
0
votes
1answer
590 views
Microsoft Remote Desktop Keychain access
I use Microsoft Remote Desktop and have passwords saved for different remote desktop connections. Since some time back I get the error:
We couldn't retreieve your password from your keychain, please ...
1
vote
0answers
478 views
Stop MacOS Catalina adding SSH keys automatically
Getting a bit annoyed by this now and probably something simple!
I have various different ssh keys that I use to connect to a range of servers as well as a key to access Github. These keys are all ...
2
votes
1answer
70 views
Why are these corporate certificates pre-installed and is it safe to delete/“Never Trust” most/all of them?
I was going through this macOS Security and Privacy Guide repo, step by step, and found some good privacy tips. However, when I arrived at the Certificate Authorities section I got a little confused. ...
