Questions tagged [keychain]
The password management system in macOS
732
questions
0
votes
0answers
9 views
Website certificate “marked as not trusted” despite being, in fact, marked as trusted
There's a particular website which I use a lot (university-related) and has given me grief with its certificate for years now. I oscillate between periods of indignation and attempts at ...
1
vote
1answer
31 views
How to convert a .cer file to .p12 without the keychain password?
I have to "codesign" a distribution certificate inside a .ipa file to deploy an in-house application for a company.
I have access to their developer account. The new provisioning profile had been ...
0
votes
1answer
22 views
How can I select a password for a website with my keyboard?
I store passwords for websites in my safari keychain and when I visit a website there is the key icon in the username field. I can click on this key and autofill the username and password, but I hate ...
0
votes
2answers
83 views
Catalina Trusted Root CA certificates are revoked - Chrome
I have a trusted self-signed root CA named CA and I use that to sign a certificate for my local website, before I install CA's certificate and trust that, chrome shows me an error about the site SSL ...
1
vote
1answer
26 views
decrypt incoming mail server password Apple Mail
I have a mail account where the incoming mail server password is set, but the outgoing not.
I can't remember why the password is not set on the outgoing mail server, but I would like to use it now + I ...
0
votes
0answers
6 views
How to detect and prevent adding key to a system keychain?
I have system keychain that contained root certificate that was set to be trusted. After removing it and locking keychain certificate appeared again after some time (with locked keychain).
Is there ...
0
votes
1answer
15 views
How to remove a corrupted Trust Settings Record?
I was trying to add a trusted cert using security add-trusted-cert -d ..., but somehow the Trust Settings Record became corrupted. I can see this whenever I try to add another trusted cert, or when ...
0
votes
0answers
75 views
Touch ID Canceled by another authentication
I've had this issue over multiple iterations of OS. This began for me in High Sierra, followed into Mojave, and now into Catalina. I finally figured I'd deal with it. I've tried everything I've found ...
1
vote
1answer
42 views
ikev2provider blocking connections - misconfigured vpn settings - stuck on the same IP
I am currently struggling with very weird macOS problems. I am running Catalina on a macbook pro 2018. For the past few days I have experienced connection issues:
The first problem was when I ...
1
vote
2answers
99 views
iPad (12.3.1) not trusting certificate even after root cert has been added
I have an iPad using software version 12.3.1 that doesn't seem to be accepting the certs that I install.
In the Certificate Trust Settings I've enabled my root certificate.
Then when I open the ip in ...
0
votes
0answers
27 views
Password recovered from Keychain fails to decrypt volume
I lost my Mac computer and recovered some items from a backup. One was an a disk image with extension .dmg, with 400 MB, encrypted with Disk Utility, and last changed on 8th November 2018. The ...
0
votes
0answers
33 views
Recovering a Skype password from the Keychain
I lost my computer and Skype was tied to an email account I no longer have access to because I graduated. I recovered the Keychain from a backup and I can see these items, all with kind application ...
0
votes
0answers
63 views
How to sync all iCloud Keychain passwords between Mac and iPhone?
How can I see all the Passwords of Keychain on the iCloud on my iPhone? To my understanding Keychain will only sync Safari passwords between devices, but I'd like to be able to have all my Keychain ...
0
votes
1answer
80 views
How to prompt Safari to save website's username and password to keychain?
Given the site: https://ritx-fl-sales.bswa.net, username and password: how do I prompt Safari to save the username and password to the keychain, so that it is available next time I need to logon to ...
0
votes
0answers
11 views
How can I have Safari (or other apps) use different keychains?
I'd like to isolate which applications/websites have access to specific keychain contents (e.g., certificates and the like) so that I can be sure I'm not sharing secrets inappropriately. I'm planning ...
1
vote
1answer
68 views
iOS no longer suggesting passwords
I’m running iOS 12 on an iPhone 6 and Safari no longer gives an auto-suggested password when creating new online accounts.
Am I misremembering that this feature existed at one point or is there some ...
0
votes
0answers
22 views
How do I only select one specific cert for Xcode?
I am trying to generate an .ipa and Xcode continues to grab the expired certificate from App Store Connect.
How can I remove only one of the certs without completing removing my email account that is ...
0
votes
1answer
50 views
How to prevent terminal from printing passwords from keychain?
I currently use the command-line utility security in a shell script to access a password from keychain. I am surprised that echoing my password variable works and reveals the password in my terminal ...
1
vote
0answers
16 views
Save Microsoft Account in Keychain for Windows Server?
I regularly connect to a Windows file server that uses a Microsoft account login (email address + password). Every time I connect, my MacOS (10.14, but also 10.13 and 10.12 previously) asks me for the ...
2
votes
0answers
40 views
Can a firm with encryption keys decrypt iCloud keychain data of Chinese users?
Apple has already given all data of Chinese iCloud users to Guizhou on the Cloud Big Data Industrial Development Co., Ltd., (GCBD), as well as their encryption keys, which means it can decrypt these ...
1
vote
1answer
46 views
Admin Password refused
I have got a slightly strange issue. The other day I logged into my macbook without problems. It went into sleep mode, I tried in the evening to log in again. My password was refused. I reset the ...
0
votes
0answers
34 views
Updating username AND password for a keychain via the security command in terminal?
I'm asking if there's a way to use the security command in terminal to update both the username and password.
I can change the password via:
security add-generic-password -a <account> ... -U -...
2
votes
0answers
44 views
macOS Mojave timed bug, Keychain password prompt by system services, Menu Bar disappears, windows become unfocusable
macOS Mojave version: 10.14.6 (18G87)
I've been having a rather strange, but insanely annoying issue that occurs after a few days of uptime as of late with the following symptoms:
The Menu Bar ...
2
votes
1answer
55 views
accountsKeychainExport inside Keychain - malware?
After few months I opened Keychain Access and suddenly there is a new keychain which points to non existing file with path /private/var/folders/14/vvg4hynx6n3dkcv78dll_c5r0000gn/T/...
3
votes
2answers
55 views
How to see certificate for intermediate CA in Keychain?
When I check details of a certificate I only see information about the certificate itself. Is there any way to see the issuer’s certificate? In my case it’s an intermediate CA. The certificate that I ...
3
votes
1answer
67 views
iCloud Keychain out of sync after Mac user password change
on my macOS Mojave 10.14.5 (18F132), where I'm logged in with my iCloud account, if I perform a domain Mac user password change (from System Preferences) then the iCloud Keychain sync will be turned ...
0
votes
0answers
110 views
Unlocking APFS volume window doesn't accept input
After upgrading macOS to from 10.11 El Capitan to 10.14 Mojave and with that got the main disk converted to APFS (and also encrypted), the computer cannot be booted. Boot screen shows a white ...
8
votes
3answers
4k views
iCloud Keychain refuses to setup on Catalina
I'm running the macOS Catalina public beta on a partition of my 2012 MacBook Air. I've been trying to get iCloud Keychain to work (the only thing holding me back from upgrading my main partition), but ...
2
votes
1answer
188 views
“Hold for Authentication” when printing through LP / LPR
I have a Dell network printer mapped to my MAC.
I'm able to print from applications without any issues, but when I try to print using terminal (lp or lpr), every file gets held up on the printer with ...
0
votes
1answer
40 views
Is Apple Keyring data stored locally-only on devices?
I would like to understand if the keyring database is stored only on the local Apple device or if it is also stored on servers on the internet.
1
vote
0answers
27 views
Individual iCloud passwords randomly/occasionally disappear
Every few months I notice a password or two I need is no longer in the iCloud passwords list found in Mac Safari preferences.
This issue has happened on several (6+) occasions over the past year.
The ...
1
vote
1answer
186 views
Mac OS Mojave: How to rename my keychain?
I just recovered my OS from TimeMachine.
What happened is that instead of my keychain being restored, it was renamed to login.keychain2 and a new empty login.keychain was created.
I tried to delete ...
0
votes
1answer
170 views
How do I remove an ssh private key from ssh-agent/keychain
I followed some aws guide to add my private key to ssh-agent, using:
ssh-add -K "MyPrivateKey.pem"
However, I can't seem to remove the key using :
ssh-add -d "MyPrivateKey.pem"
which gives me the ...
0
votes
0answers
35 views
com.eltima.cmd1.mas.dropbox.authv2 keychain
When I try to launch Commander One it prompts me that it "wants to access key com.eltima.cmd1.mas.dropbox.authv2 in your keychain" but it never happens.
May it be some malware?
1
vote
0answers
119 views
Does iCloud Keychain require 2fa in macOS 10.15 Catalina?
I've installed Catalina on a partition on my 2012 MacBook Air. However, when I go to set up iCloud Keychain, it asks me to set up 2FA, and then when I decline, it just says "Setting Up" and eventually ...
1
vote
1answer
59 views
Stop Safari (MacOS) from suggesting password on captive portal
I'm often logged into a non-public Network, where I was given a user name and password for the captive portal to gain internet access.
In Safari on my MacBook, I made a bookmark for the portal page ...
0
votes
0answers
21 views
MacBook air 2014 keychain forgets Wi-Fi passwords
My 2014 MacBook air 2014 forgets Wi-Fi passwords.
When I enter a Wi-Fi password and I reboot or let it go to sleep, then I have to retype the password again. I am running macOS Mojave, so I can't ...
2
votes
0answers
43 views
macOS will not remember AirPrint password
[macOS 10.14.5]
I have an HP OfficeJet Pro 8710, all the latest firmware updates as of today, and have changed the default AirPrint username/password. I can successfully print. However, even though I ...
0
votes
0answers
170 views
Starting VPN Connection without Keychain Password Prompt
My IKEv2 VPN client certificates are stored in Keychain. When I initiate a VPN connection, I'm immediately prompted for my Macbook administrator account password before access to the Client ...
1
vote
2answers
114 views
How do you clear SSL leaf certificates mappings to particular domains
I visit my website using Chrome on macOS Mojave, for example, qa.abc.com, and the SSL leaf certificate is from customer-test.ssl.fastly.net. I recently updated the CNAME record in my DNS for qa.abc....
7
votes
1answer
533 views
Strange looking certificate in macOS Keychain
I need help with a strange looking certificate which has appeared in the Keychain of my Mac.
The name of the certificate is "A9936B80-41C7-4D34-8020-59C3E40A31A8 A98369B2-0C8C-4CF8-9921-015C5D9A4C86"....
0
votes
1answer
88 views
Move Secure Notes items from Keychain of one Mac to another?
I have a keychain created, to hold a bunch of Secure Notes items. These are not in the default keychain files created by Apple.
In previous versions of macOS, I was able simply drag the keychain file ...
0
votes
0answers
98 views
Connect to VPN based on IKEv2 security protocol and EAP-MSCHAPv2 authentication protocol with root certification on MacOS?
I am trying to connect to VPN via IKEv2 security protocol and EAP-MSCHAPv2 authentication protocol.
But after adding my certification in to the keychain access, I am still not able to select this ...
2
votes
1answer
208 views
Force a sync of iCloud Keychain from iOS to macOS?
My passwords on my iCloud Keychain on my MacBook and iPhone are out of sync. There are several new passwords on each device that aren't present on the other. Following a Google search, I logged out of ...
4
votes
1answer
63 views
How do I I prevent passwords from being saved to the keychain?
Whenever I use the SVN command-line client on my Mac, it stores the password to os keychains without my permission.
While the immediate issue is with the SVN command-line client, the scope of this ...
0
votes
1answer
249 views
Why is my iOS Development Certificate Team ID different from my real Team ID?
When I create an iOS Development Certificate using Xcode or the manual CSR process, the Team ID is something like (for e.g.) EK1H65HGFB, whereas my Team ID according to the Apple website is actually ...
4
votes
0answers
113 views
Is there a command line interface to Keychain's / the system Password Assistant utility?
When creating keychain records, changing your user password, and various other security-minded aspects of the system, there is a little key icon you can click on that opens the above Password ...
3
votes
0answers
31 views
Big bug: why does iCloud Keychain remember the wrong expiration month for all of my credit cards?
I've been adding credit cards to my iCloud Keychain for years, and after a few months, I notice that my payments receive errors when I use the autofill from iCloud.
The bug:
I've realized that ...
0
votes
0answers
52 views
Safari 12.1.x problem with using certificates
I have an application which is using Crypto Token Kit and I have certificates which I should be able to use on web pages. The application is working for Safari version 12.0.3 and Google Chrome.
For ...
0
votes
0answers
29 views
How to mass-deploy a root certificate in a corporate environment
Our Windows administrator deploys a root CA certificate to all the machines through Group Policies, which works very well in a corporate setting. Is there something similar to this we can use for our ...
