SYSTEMKEYCHAIN(8) BSD System Manager's Manual SYSTEMKEYCHAIN(8)

NAME
     ssyysstteemmkkeeyycchhaaiinn - creates system keychains and allows keychains to unlock
     keychains

SYNOPSIS
     ssyysstteemmkkeeyycchhaaiinn [-ffvv] [-k filename] [-C] [password]
     ssyysstteemmkkeeyycchhaaiinn [-ffvvcc] [-k filename] [-s] [file ...]
     ssyysstteemmkkeeyycchhaaiinn [-vv] [-k filename] [-t]

DESCRIPTION
     The ssyysstteemmkkeeyycchhaaiinn can be used to create a system keychain, make it pos-
     sible for a keychain to unlock another keychain, or test unlocking a key-
     chain.

     The options are as follows:

     -CC      Create a keychain and establish it in the system as the primary
             system keychain whose unlocking is automatically handled by the
             system. The new keychain is empty. If the optional password argu-
             ment is given, the keychain can be also be unlocked with that;
             otherwise, the keychain has no password and can only be unlocked
             by the system.

     -ss      Extract the master secret from source keychain(s) and install
             them in a destination keychain to allow unlocking.

     -tt      Test unlocking the system keychain.

     -kk systemKeychain
             Use a keychain other than the default as the destination system
             keychain.

     -cc      Create the target keychain if necessary.

     -ff      Force creation of a system keychain or overwriting of an existing
             key for keychain unlocking keychain operations.

     -vv      Turn on verbose mode.

     By default, ssyysstteemmkkeeyycchhaaiinn works with the keychain file stored at
     /Library/Keychains/System.keychain .  Use of the -k option can specify a
     different target file.

     Use of the -s option allows keychains to be setup to unlock other key-
     chains.  Chains of keychain unlocks can be setup in this manner to make a
     series of keychains unlock while only needing to manually unlock the
     first one.  This functionality can be verified with the -t (test unlock)
     option.

FILES     /Library/Keychains/System.keychain

DIAGNOSTICS     The ssyysstteemmkkeeyycchhaaiinn utility exits 0 on success, and >0 if an error occurs.

HISTORY     The ssyysstteemmkkeeyycchhaaiinn command appeared in Mac OS 10.2.0 .

BSD                             March 14, 2006                             BSD