How to delete permamently personal Root Certificate which keeps on Re-appearing on Mac

I have deleted a personal Root Certificate , but it keeps on Popping back two days later. Is there a way to permamnetly delete it.

MacBook Air 13″, macOS 10.14

Posted on Nov 28, 2023 2:13 AM

Similar questions

Cannot delete certificate in system root keychains In short: MBP 14 2021 MacOs 12.6 (21G115) I want to delete certificate "Cisco root CA 2048" from my keychain in system root. I doesn't work, instead it's giving me the message "an error occured while deleting etc etc Unix [operation not permitted]. I tried terminal, sudo security delete-certificate -Z Cisco root CA 2048 and got an aunable to delete message Long story: I can't connect to a certain network at work and the bloat from a cisco VPN software i have to use with the university might stop said network to display me a certificate (as said network works fine on my phone, and had triggered a certificate accept request). Either way, relevant or not I want this Cisco junk gone. Please i you have the solution just don't come up with technicalities and random terminal commands og tales of SHA-1 hashes i won't be able to understand, step by step is fine. Thank you ;)
1544 1
A 3rd-party installer made certificate trust setting changes: how to identify the changes in Keychain Access.app? Hi, I have a question about how to identify changes to my certificate trust settings made by a 3rd-party installer. I just installed a macOS utility called "Plantronics Hub", which is used to manage settings and firmware for audio headsets made by Plantronics (now Poly). During the install process, a dialog popped up with a Touch ID prompt, saying the installer wanted to "make changes to the System Certificate Trust Settings". While my brain was still processing what that meant, my finger had already touched the Touch ID sensor and the install completed. I was left thinking "Oh no, what have I done!", and it was too late to stop it. I then opened Keychain Access.app to see if I could identify what changes the installer had made to my certificate trust settings. This is where my uncertainty begins. In Keychain Access.app, under the "System" keychain, I immediately saw a new self-signed root certificate called "Plantronics Hub" which says "This certificate is marked as trusted for all users". So this is almost certainly what it installed - or _one_ of the things it installed. And clearly it's a problem: I don't want my system trusting random self-signed root certificates from hardware vendors. I only want my system trusting bona fide Certificate Authorities. If this certificate's private key was ever compromized, a malicious actor could then issue arbitrary certificates in any domain, and my macOS machine would blindly trust them! So obviously I'll be deleting that. But how can I tell if this was the _only_ change to my certificate trust settings made by this installer? Ideally there'd be some kind of "recently updated" view in Keychain Access.app, but there is no such view. I can see when certificates were issued and when they will expire - but I cannot see who installed them or when they were installed. There's no obvious way to tell which certificates were pre-installed by Apple, and which have been added later, and the difference between the "System" keychain and the "System Roots" keychain is not clear or explained in the documentation. My concern is: what if the installer made other changes? How can I tell? Any help appreciated.
1505 2
Expired certificate transferred by Migration Assistant I recently transferred my files with Migration Assistant from an Intel iMac to a new Mac Studio, and in reviewing what had been transferred, found that an expired certificate from my old iMac had been transferred to the System Certificates group in my new Keychain. Can I safely delete that expired certificate? It is marked with a red x and the warning that it is not trusted.
1253 1

1 reply

WheelieNick

Level 8

45,903 points

Nov 28, 2023 4:02 AM in response to spurs12

Have you tried these steps to remove the certificate?

Click on the "Finder" icon in the Dock.
Click on the "Go" menu at the top of the window and select "Utilities".
Double-click on "Keychain Access".
Select "Certificates" from the list of categories.
Click on the certificate you want to delete.

If so, is your computer or account managed by a company or education institute? Then the system admin can push the certificate

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

How to delete permamently personal Root Certificate which keeps on Re-appearing on Mac