HT204659: About the security content of OS X Yosemite v10.10.3 and Security Update 2015-004

Learn about About the security content of OS X Yosemite v10.10.3 and Security Update 2015-004
jorgfromFra

Q: app store unavailable following security update 2015-004 (Mavericks)

Just installed the Security Update 2015-004 (for Mavericks - being on 10.9.5).

 

When restarted, Mac came up with the App Store (as usually, apparently looking for further updates).

 

Problem: Window stays bank, just showing the greyish AppStore icon. Even when changing to other categories (Featured, Top Charts, ...).

 

Tries to fool around, pressed Command-? (to get to AppStore help). Result:

" Help Center can't verify the identity of the server "help.apple.com" " (and showing all the vertificate readings).

 

Apple forgot that some certificates are 'bad' ?

 

Here, already the top level certificate is not trusted (VeriSign Class 3 Public Primary Certification Authority - G5). Is this normal - just ignore (aka, check-mark the Always trust) ???

Posted on Apr 9, 2015 7:45 AM

Close

Q: app store unavailable following security update 2015-004 (Mavericks)

  • All replies
  • Helpful answers

Previous Page 2 of 4 last Next
  • by Made Taruna Utama,

    Made Taruna Utama Made Taruna Utama Apr 12, 2015 5:51 PM in response to dltd
    Level 1 (0 points)
    Apr 12, 2015 5:51 PM in response to dltd

    Hi dltd,

    Thank you for assist me.I did few times to export and deleted "VeriSign Class 3 Public Primary CA -5 doesn't move at all(still stay).Please could you write down step by step,I use iMac...Thank you so much dltd and appreciate it.

  • by dltd,

    dltd dltd Apr 12, 2015 10:12 PM in response to Made Taruna Utama
    Level 1 (0 points)
    Apr 12, 2015 10:12 PM in response to Made Taruna Utama

    Do you have the login Keychain selected in the Keychains window? Just making sure that you don't have the System Roots Keychain selected.

     

    Glad to see the link posted by zsero that the Security Update broke the VeriSign SSL certificates.

     

    It would also be nice if Apple would update their troubleshooting information on pages like Can't connect to the iTunes Store - Apple Support to include a troubleshooting section on resolving issues following a security software update. After the security software update, the first indication of an issue was the display of a series of messages saying that I cannot connect to the iTunes App Store. I then found that I couldn't get the App Store to display pages properly, and the page for Updates was blank.

     

    If it wasn't for the post from Linc Davis and jorgfromFra , I'd still be scratching my head.

  • by Made Taruna Utama,

    Made Taruna Utama Made Taruna Utama Apr 12, 2015 10:32 PM in response to dltd
    Level 1 (0 points)
    Apr 12, 2015 10:32 PM in response to dltd

    Hi dltd and Linc Davis,

    Thank you for share info about step by step solve our problem but still not working.I think have effect  all App(free & paid) on App store can't click/responded/freeze.This happen App Store version Indonesia.ITunes version Indonesia was OK.How about you,I mean App can you download?.About keychain: Login,Local Items,System,System Roots.Category kechain: All items,Passwords,secure Notes,My Certificates,keys,Certtificates.Honestly I am headache has been 2 weeks ago.,till I am connect Apple Store Support(US) to do Screen Share Link..to make know what going on my iMac?but still not solve till now.Thank you so much all  to share info to solve this problem.

  • by goestaberlin,

    goestaberlin goestaberlin Apr 15, 2015 2:40 AM in response to jorgfromFra
    Level 1 (0 points)
    Apr 15, 2015 2:40 AM in response to jorgfromFra

    The verisign certificates are all "root certificates" on the machine I'm trying to fix (running 10.8.5), not "login", and cannot be removed it seems. Any workaround? There is, alas, no time machine state from before the security update. Do I really need to do a clean install from the 2011 disks and work my way up to pre-2015-004? Has there been ANY response from Apple so far that anyone's aware of?

  • by ksouthern73,

    ksouthern73 ksouthern73 Apr 15, 2015 6:59 AM in response to Linc Davis
    Level 1 (0 points)
    Apr 15, 2015 6:59 AM in response to Linc Davis

    Linc,

    I have read your response to this issue with security updates for MacBook 13" (2012) running OSX 10.9.5 and I am assuming that step #5 is what I need to take in order to fix this issue? I believe my problem started prior to any updates because when the Java update came up I clicked "remind me later" and shortly afterwards is when I began to experience issues and ONLY when logging into certain sites (eBay- but only when confirming an order and purchasing/printing a shipping label).  I took a screen shot of how it looked when using Chrome rather than Safari. Screen Shot 2015-04-15 at 9.43.02 AM.png

    Sorry if I am repeating myself, but I have never had an issue with my Mac since 2012 and this is my first time posting a thread.  Your help is certainly appreciated!

    Thank you!

    Kimberly

  • by avinator007,

    avinator007 avinator007 Apr 15, 2015 10:00 AM in response to ohmiap
    Level 1 (15 points)
    Apr 15, 2015 10:00 AM in response to ohmiap

    Thanks dude !

  • by jörgfromfrankfurt a. main,

    jörgfromfrankfurt a. main jörgfromfrankfurt a. main Apr 15, 2015 1:58 PM in response to dltd
    Level 1 (0 points)
    Apr 15, 2015 1:58 PM in response to dltd

    Seems not to be exclusive only to certificates of the login only (as for me in the first posting), but rather the handling of certificates by other apps, see attached figure to explain quickly.

    Of course, when opening the Trust settings in Keychain.app of this certificate (under System Roots -> Certificates), it's set to Use System Defaults on top (thus all other settings read 'no value specified')

    Strange, a valid certificate (as to Keychain.app) is not considered to be valid for Safari.

     

    Do I now have to delete one certificate after the other???

     

    Or this is another issue, since earlier the certificates had the same name, but were different, as they had differed in the serial number.

     

    Screen Shot 2015-04-15 at 22.32.38.png

  • by Bob R,

    Bob R Bob R Apr 15, 2015 3:45 PM in response to ohmiap
    Level 2 (334 points)
    Mac OS X
    Apr 15, 2015 3:45 PM in response to ohmiap

    Thank you so much. This solved my problem also.

  • by goestaberlin,

    goestaberlin goestaberlin Apr 18, 2015 12:35 AM in response to jorgfromFra
    Level 1 (0 points)
    Apr 18, 2015 12:35 AM in response to jorgfromFra

    Just to report: none of the fixes & workarounds worked on my mom's macbook pro with 10.8.5; what ended up making her system functional again (last-ditch attempt before reinstall) was resetting the keychain. Resetting your keychain in Mac OS X - Apple Support

     

    This at least got the app store to work again; not sure yet about specific certificates.

     

    Cheers.

  • by go2r,

    go2r go2r Apr 18, 2015 4:03 AM in response to jorgfromFra
    Level 1 (0 points)
    Apr 18, 2015 4:03 AM in response to jorgfromFra

    I was struggling with the same problem after having updated Maverick with Apple's latest security update (2015-004). None of the here presented solutions worked for me.

    Eventually I downloaded the update manually and I re-installed it.

     

    Apple - Support - Downloads

     

    After that everything was working well again (iTunes and the connection to apple store).

  • by Bob R,

    Bob R Bob R Apr 18, 2015 6:08 AM in response to Linc Davis
    Level 2 (334 points)
    Mac OS X
    Apr 18, 2015 6:08 AM in response to Linc Davis

    Thanks for the solution Linc. I had already deleted the 4 VeriSign Certificates from my Keychain login before I read the details of your step 5.

    My question is do I need to replace these certificates & how would I do it?

    I could restore my KeyChain Login from Time mach and then do the export-Import if this will not cause other problems.

    Thanks again for the solution.

  • by Ted Thibodeau Jr,

    Ted Thibodeau Jr Ted Thibodeau Jr Apr 20, 2015 6:52 AM in response to go2r
    Level 1 (5 points)
    Apr 20, 2015 6:52 AM in response to go2r

    I'm glad this worked for you.  Unfortunately, it didn't solve the issue for me.

  • by frankfromdownersgrove,

    frankfromdownersgrove frankfromdownersgrove Apr 20, 2015 6:41 PM in response to jorgfromFra
    Level 1 (0 points)
    Apr 20, 2015 6:41 PM in response to jorgfromFra

    I wanted to add my sad story to this thread. I did all the stuff Linc Davis suggested to no avail. I called the Apple help line and they went through all the same steps making sure the certificates were cleaned up. All to no avail, they asked me to reinstall the OS. I did that and it fixed the problem.

    Unfortunately I didn't connect the security patch to the problem. Duh! My bad.

    I allowed the patches to reinstall and didn't notice the App store problem until a day later. I checked my keychain and my Avast anti virus had a funny certificate so I uninstalled that and rewiped the OS again.

    Again I allowed the security patch to be installed and again I couldn't go to the App store. Only now I know what it is.

    I reinstalled the OS and it's fine and I'm not installing anything until a later patch comes out.

    Stay away from Security Update 2015-004 it *****!

     

    My os is 10.9.5 it's a Mac Mini late 2012 model I just bought this year.

    Good luck kids,

    Frank

  • by Pioneer_11,

    Pioneer_11 Pioneer_11 Apr 22, 2015 11:55 PM in response to go2r
    Level 1 (0 points)
    Apr 22, 2015 11:55 PM in response to go2r

    Thanks go2r

    This worked for me! Had the same symptoms (can't connect to App Store, …) After installing Security update again (downloaded from Apple - Support - Downloads) everything works fine.

  • by 6.6Re,

    6.6Re 6.6Re Apr 23, 2015 9:53 PM in response to jorgfromFra
    Level 1 (5 points)
    Apr 23, 2015 9:53 PM in response to jorgfromFra
Previous Page 2 of 4 last Next