Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Cannot Delete Key from System Keychain

I am having a bit of a problem deleting keys (any keys) from the System keychain on my iMac. Here's what happens:


  1. I go to Keychain Access and select System from the list of keychains.
  2. I unlock the keychain using my admin password (the icon changes from locked to unlocked).
  3. I left-click on the key that I want to delete and select Delete "The Key I want to delete"
  4. I get a box that says "Keychain Access is trying to modify the system keychain, Type your password to allow this." So I do.
  5. I get a box that says "Are you sure you want to delete "The Key I want to delete" from the System keychain?" I click 'Delete'
  6. I get a box that says "An error occurred while deleting "The Key I want to delete" UNIX[Operation not permitted]


I am not able to change any of the information in any of the System keys nor am I able to add new keys to the System keychain. My System keychain contains 20 items - all of which are either passwords to WiFis, passwords to Time Machines (which I want to delete), and one application password to the guest account. This being said, I would have no problem "resetting" the System keychain to default (empty) condition.


I also have a MacBook, which is not exhibiting this problem. That is to say that I can freely edit, delete and create keys in the System keychain. I followed the instructions here to backup the system keychain from my MacBook and install it on the iMac, but get an error saying "Operation not permitted".


Any ideas?


Thanks!

iMac (27-inch Mid 2010), OS X El Capitan (10.11.1)

Posted on Nov 29, 2015 8:40 AM

Reply
Question marked as Best reply

Posted on Mar 29, 2017 10:29 AM

Stumbled across this thread because I was unable to read or save any VPN credentials or delete existing ones. I highly suspect the root cause was migrating data from an older Mac's time machine backup.


The recommended solution did not work for me (on 10.12.3 or 10.12.4). Instead, disabling system integrity protection (SIP) temporarily allowed me to once again modify the system keychain.


To disable SIP, restart in recovery mode and use Terminal to run:

csrutil disable


Restart into your regular boot drive and make the keychain changes.


To re-enable SIP, restart in recovery mode and use Terminal to run:

csrutil enable


After restarting back to my main partition, I was still able to modify the keychain and the issue was completely gone.

16 replies

Cannot Delete Key from System Keychain

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple ID.