Q: HELP: I can't now renew my Code Signing Certificate
Hello
I have to renew my Code Signing Certificate for my MDM server the 13.2.2016. But every time i try, its closes and after a some seconds the certificate is gone.
I can then import it again from a TimeMachine backup and try again, but same issue
The server is running:
OSX ver.10.11.3
Server ver. 5.0.15
On a Mac mini Server (Late 2012)
I have tried this true terminal command:
sudo certadmin --recreate-CA-signed-certificate “mdm.rootdom.dk Code Signing Certificate" "IntermediateCA_MDM.ROOTDOM.DK_1” 22c23390
But without luck.
I upgraded the server from 10.11.1 before, so i think it is because of the update and one off those fixes:
https://support.apple.com/en-us/HT205637
Keychain Access
Available for: OS X El Capitan v10.11 and v10.11.1
Impact: A malicious application may be able to masquerade as the Keychain Server.
Description: An issue existed in how Keychain Access interacted with Keychain Agent. This issue was resolved by removing legacy functionality.
CVE-ID
CVE-2015-7045 : Luyi Xing and XiaoFeng Wang of Indiana University Bloomington, Xiaolong Bai of Indiana University Bloomington and Tsinghua University, Tongxin Li of Peking University, Kai Chen of Indiana University Bloomington and Institute of Information Engineering, Xiaojing Liao of Georgia Institute of Technology, Shi-Min Hu of Tsinghua University, and Xinhui Han of Peking University
Security
Available for: OS X Mavericks v10.9.5, OS X Yosemite v10.10.5, OS X El Capitan v10.11 and v10.11.1
Impact: A malicious application may gain access to a user's Keychain items
Description: An issue existed in the validation of access control lists for keychain items. This issue was addressed through improved access control list checks.
CVE-ID
CVE-2015-7058
Right now i considering to install the 10.11.4 beta or make a roll backup to 10.11.1..
Due some of you have a idea for help?
Sincerely, Kenneth
Mac mini, OS X El Capitan (10.11.3), Server 5.0.15
Posted on Feb 5, 2016 6:02 AM