1269
votes
Accepted
How can I permanently add my SSH private key to Keychain so it is automatically available to ssh?
It is not possible to add private key to Keychain, but you can store passphrase for private key in Keychain.
On OSX, the native ssh-add command has a special argument to save the private key's ...
- 12.8k
131
votes
Accepted
Can't delete keychain items with UI, but command line works fine
I notice you say, "If I now redo the search in Keychain Access…" implying that you began by searching when you weren't able to delete the item. Find it in the list without searching and then delete. ...
- 1,435
62
votes
How do I stop 'mdwrite wants to use the "metadata" keychain' prompts?
I had the same problem. I opened my login keychain and searched for MetadataKeychain. I clicked show password and copied and pasted it into the dialog asking for the password.
It worked!
- 621
61
votes
High Sierra 10.13 : Keychain Access Menubar Item Missing?
"Lock Screen" is now available via the Apple menu.
- 759
55
votes
Accepted
How to view certificate info without installing
I'm not sure if this was available in the OS you had at the time you wrote your question, but at least with OS X 10.11.6, if you select the .crt file in the Finder and press the spacebar, a Quick Look ...
54
votes
How can I permanently add my SSH private key to Keychain so it is automatically available to ssh?
I had a similar problem, in that I was being asked every time for my pub-key passphrase. Per suggestion of user "trisweb" above, I turned on these options to ~/.ssh/config:
Host *
UseKeychain yes
...
- 641
50
votes
Accepted
How do I update my root certificates on an older version of Mac OS (e.g. El Capitan)?
The easiest way to do this is to transfer your System Root certificates from another Mac to which you have access that runs a more modern version of macOS. (Why not just download them? See note that ...
- 961
42
votes
Can't delete keychain items with UI, but command line works fine
Had the same problem, found that I was able to delete keys once I switched from iCloud to login in the Default Keychains section.
- 521
41
votes
How to tell why macOS thinks that a certificate is revoked?
I tried crlrefresh rp and also manually deleting the OCSP cache with sudo rm /var/db/crls/*cache.db as documented by GlobalSign.
However, the cache seems to be in a different location on macOS 10.12 ...
- 1,225
36
votes
How can I permanently add my SSH private key to Keychain so it is automatically available to ssh?
To all where the above did not work, my issue appears to have been because I was duplicating the UseKeychain yes & AddKeysToAgent yes in all ssh key profiles / shortcuts. I updated my ~/.ssh/...
- 471
33
votes
Accepted
"Unknown Error = -2,147,414,007" on creating certificate with Certificate Assistant
Was able to get this to work. The purpose for creating a certificate was to codesign gdb on Mac. Here are the steps for the same:-
Create a certificate with all the parameters mentioned above.
...
- 940
32
votes
How to tell Google Chrome to use my Keychain
Since v. 45 of chrome passwords are not synced to the OSX keychain anymore, the support has been dropped completely.
https://code.google.com/p/chromium/issues/detail?id=466638
Remove OS X Keychain ...
- 421
28
votes
Accepted
macOS 10.12 Sierra will not forget my ssh keyfile passphrase
To disable storing passphrase in keychain you should add following lines to ~/.ssh/config file:
Host *
UseKeyChain no
If you already have passphrase stored in keychain you can delete it using ...
- 416
21
votes
How can I permanently add my SSH private key to Keychain so it is automatically available to ssh?
Also, in macOS Sierra and High Sierra (don't know about previous versions), running ssh-add -A will get the agent to load all keys whose passphrases are stored on Keychain... So very handy
Note that ...
- 1,246
20
votes
How do I delete or fix my Keychain after changing my password?
Along the same lines:
"You can safely delete the Keychains folder (or just the folders inside it) in your home directory
eg. /Users/yourusername/Library/Keychains
this folder can be deleted. It ...
- 321
20
votes
macOS 10.12 Sierra will not forget my ssh keyfile passphrase
Thanks to Clive, I have a better understanding of this new 'feature'. When you type in your passphrase Sierra adds it to your Keychain but not to the ssh-agent. If your identity isn't in ssh-agent ...
- 201
20
votes
How to tell why macOS thinks that a certificate is revoked?
Might be this, seems GlobalSign has got a problem with their OCSP. This is taken from their twitter (https://twitter.com/globalsign/status/786505261842247680?lang=da)
We are currently experiencing ...
- 301
20
votes
Accepted
App / curl still getting certificate expired error due to expired Let's Encrypt certificate
OpenSSL on macOS does not use the system keychain (which makes sense as it's a cross platform library) but rather has its own .pem file containing its root certificates. Even though my systems have a ...
- 2,169
19
votes
OSX is repeatedly asking for login keychain password
The keychain by default locks after some time of inactivity and when the computer sleeps.
You can disable this behaviour on the keychain settings:
Select the keychain
Edit / Right click
Change ...
- 553
19
votes
Accepted
Keychain won't let copy passwords after 10.11.1 update
Third-party utilities such as Alfred, TextExpander, or MagicPrefs might appear to take "control" of the window as far as the OS is concerned. You can find the culprit by disabling them all, and ...
- 6,182
19
votes
Accepted
Recover SSH private key passphrase from keychain
Open Keychain Access and enable the option View > Show Invisible Items.
Than you must search for id_rsa or ‘ssh’.
- 306
19
votes
Accepted
What is Department of Defense Root CA 2 doing on my Mac?
It's one of the trusted certificate authorities for at least OS X Mavericks (10.9) through OS X El Capitan (10.11), so under those OS versions it'll be in the System Roots keychain. It was apparently ...
- 33.2k
18
votes
Accepted
OS X 10.11 unable to press "allow" on Keychain Access dialogs
I encountered this same issue today. I could not "Allow" or "Always Allow" any programs, nor could I confirm my password in any dialogues. The interface wouldn't shake, even if I had entered the ...
- 196
18
votes
Accepted
Sync Chrome passwords with Apple iCloud Keychain
I just did that using Safari 13.1.1 (on Catalina 10.15.5).
Open Chrome (if not already running) to refresh its cache
Quit Chrome completely (⌘-Q)
Open Safari (if not already running)
Click File > ...
- 336
18
votes
iCloud Keychain in Safari Requires Password
On Mac OS 10.14.4, go to system preferences, select Touch ID. Uncheck using Touch ID for Safari AutoFill.
It will no longer require Touch ID to autofill passwords and reverts back to earlier behavior....
- 280
17
votes
OSX is repeatedly asking for login keychain password
I had the same problem. It has bothered me for several weeks on my new Mac. It should be caused by changing Mac password using 3rd party software. On macOS El Capitan and Sierra, there is no Keychain ...
- 437
17
votes
How to access the Wi-Fi password through Terminal?
I think what you're actually looking for is this:
security find-generic-password -ga "ROUTERNAME" | grep "password:"
You'll get in response something like:
password: "ThePassword"
You can also ...
- 171
17
votes
How do you get a Cisco VPN connection to remember its password?
I guess you are using anyconnect to connect to the Cisco VPN server. AnyConnect can also be used from Terminal. This works on macOS Sierra and AnyConnect 3.1.14018. Create a bash script with the ...
- 171
17
votes
Accepted
Unable to unlock login keychain on sierra in ssh
Your login keychain doesn't appear to be in the search list, i.e. when you checked it, it just shows the System keychain twice. No login keychain:
(~)$ security list-keychains
"/Library/Keychains/...
- 436
16
votes
Sync Chrome passwords with Apple iCloud Keychain
I've created small tool to deliver your credentials from Chrome into macOS keychain. Here is a page on github https://github.com/nntarasov/csv2keychain
The program interacts with macOS command-line ...
- 161
Only top scored, non community-wiki answers of a minimum length are eligible