SYSTEMKEYCHAIN(8) BSD System Manager's Manual SYSTEMKEYCHAIN(8)
NAME
systemkeychain -- creates system keychains and allows keychains to unlock keychains
SYNOPSIS
systemkeychain [-fv] [-k filename] [-C] [password]
systemkeychain [-fvc] [-k filename] [-s] [file ...]
systemkeychain [-v] [-k filename] [-t]
DESCRIPTION
The systemkeychain can be used to create a system keychain, make it possible for a keychain to unlock another keychain, or test unlocking a
keychain.
The options are as follows:
-C Create a keychain and establish it in the system as the primary system keychain whose unlocking is automatically handled by the sys-
tem. The new keychain is empty. If the optional password argument is given, the keychain can be also be unlocked with that; other-
wise, the keychain has no password and can only be unlocked by the system. The optional password option is generally used for test-
ing purposes, and using it is not recommended.
-s Extract the master secret from source keychain(s) and install them in a destination keychain to allow unlocking.
-t Test unlocking the system keychain.
-k systemKeychain
Use a keychain other than the default as the destination system keychain.
-c Create the target keychain if necessary.
-f Force creation of a system keychain or overwriting of an existing key for keychain unlocking keychain operations.
-v Turn on verbose mode.
By default, systemkeychain works with the keychain file stored at /Library/Keychains/System.keychain . Use of the -k option can specify a
different target file.
Use of the -s option allows keychains to be setup to unlock other keychains. Chains of keychain unlocks can be setup in this manner to make
a series of keychains unlock while only needing to manually unlock the first one. This functionality can be verified with the -t (test
unlock) option.
FILES
/Library/Keychains/System.keychain
DIAGNOSTICS
The systemkeychain utility exits 0 on success, and >0 if an error occurs.
HISTORY
The systemkeychain command appeared in Mac OS 10.2.0 .
BSD
March 14, 2006 BSD