Skip to main content
Question

Keychain Access Settings

  • July 6, 2016
  • 3 replies
  • 26 views

Forum|alt.badge.img+5

Anyone know how to manipulate the login Keychain settings? I've got to check these boxes for Security reasons. I'm thinking a Configuration Profile with a custom setting. Can anyone point me in the right direction?

Please and Thank you.

3 replies

mm2270
Forum|alt.badge.img+24
  • Legendary Contributor
  • July 6, 2016

I'm not certain on how you would do this with a Configuration Profile, but the following command will enable those 2 checkboxes.

security set-keychain-settings -l -t 300 ~/Library/Keychains/login.keychain

I think technically if you leave out the -t 300 it defaults to 5 minutes, since that value (5) is preconfigured in the box, but not 100% sure.

Since this is obviously targeting the logged in user's login.keychain, to deploy this from a Casper Suite policy, you'd need to work on a way of targeting the keychain per user account (while running as root) I won't get into the details on that here since there are probably 50 threads on how to run commands as the user already.


Forum|alt.badge.img+5
  • Author
  • Contributor
  • July 7, 2016

Thanks @mm2270 . Next round is on me.


Forum|alt.badge.img+1
  • New Contributor
  • June 8, 2022

Thanks @mm2270 . Next round is on me.


Did you get this thing rolled ? cos im now stuck at this, pls help me out