Regarding Systemdefault certificate/keychain on Macbook

Anyone can help me what are these systemdefault keychains and consequences to delete them? Will removing these keychain impact on anything and where are these used

MacBook Pro 16″, macOS 14.1

Posted on Dec 19, 2023 7:39 AM

Similar questions

How do I stop my Mac from asking for login keychain? I keep getting asked for keychain logins when i open my computer [Re-Titled by Moderator]
236 1
A 3rd-party installer made certificate trust setting changes: how to identify the changes in Keychain Access.app? Hi, I have a question about how to identify changes to my certificate trust settings made by a 3rd-party installer. I just installed a macOS utility called "Plantronics Hub", which is used to manage settings and firmware for audio headsets made by Plantronics (now Poly). During the install process, a dialog popped up with a Touch ID prompt, saying the installer wanted to "make changes to the System Certificate Trust Settings". While my brain was still processing what that meant, my finger had already touched the Touch ID sensor and the install completed. I was left thinking "Oh no, what have I done!", and it was too late to stop it. I then opened Keychain Access.app to see if I could identify what changes the installer had made to my certificate trust settings. This is where my uncertainty begins. In Keychain Access.app, under the "System" keychain, I immediately saw a new self-signed root certificate called "Plantronics Hub" which says "This certificate is marked as trusted for all users". So this is almost certainly what it installed - or _one_ of the things it installed. And clearly it's a problem: I don't want my system trusting random self-signed root certificates from hardware vendors. I only want my system trusting bona fide Certificate Authorities. If this certificate's private key was ever compromized, a malicious actor could then issue arbitrary certificates in any domain, and my macOS machine would blindly trust them! So obviously I'll be deleting that. But how can I tell if this was the _only_ change to my certificate trust settings made by this installer? Ideally there'd be some kind of "recently updated" view in Keychain Access.app, but there is no such view. I can see when certificates were issued and when they will expire - but I cannot see who installed them or when they were installed. There's no obvious way to tell which certificates were pre-installed by Apple, and which have been added later, and the difference between the "System" keychain and the "System Roots" keychain is not clear or explained in the documentation. My concern is: what if the installer made other changes? How can I tell? Any help appreciated.
1812 2
Microsoft SharePoint requests keychain access but unable to find password Grey box appeared on my screen, Padlock graphic and note says "Microsoft SharePoint wants to use your confidential information stored in Microsoft identity FBAA for CA nine etc. etc." then is requesting a "login" password with options "Always Allow", "Deny" and "Allow" The box is front and center on the screen cannot be covered up or deleted or go away. I cannot find the password in Keychain . [Re-Titled by Moderator]
2748 3

1 reply

MrHoffman

Level 10

149,549 points

Dec 19, 2023 9:16 AM in response to pradypan

The System keychain and the certificate store is part of how macOS can operate in a distributed network.

Certificates particularly are a fundamental part of validation and authentication.

Back up once or twice, and start blowing random stuff away.

Find out what can be deleted, and find out what breaks.

You know you want to.

Just… have backups first.

Preferably having two or more complete, robust, backups.

And expect to need to restore those backups.

And preferably keep those backups entirely disconnected while attempting or while committing (local) mayhem.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Regarding Systemdefault certificate/keychain on Macbook

Welcome to Apple Support Community

A forum where Apple customers help each other with their products. Get started with your Apple Account.

Learn more Sign up