Enter Passphrase For Key Macos Sierra

I’m a big fan of Public Key authentication for SSH but I recently ran into an issue after adding my Public Key to a couple of new Linux VMs I use.The problem was that macOS kept asking for the SSH passphrase when connecting to them, which kind of defeats the purpose of using Public Key authentication in the first place.

Thankfully, the solution is pretty simple.

Jan 17, 2017 Method #1: Fix when macOS keeps asking ssh passphrase after updated to Sierra or after reboots. You need to use the UseKeychain option in your /.ssh/config file. From the sshconfig man page: On macOS, specifies whether the system should search for passphrases in the user’s keychain when attempting to use a particular key. To make the key available to the system and store the passphrase in the system keychain, we will need to complete several additional steps. Note that this is only needed if you would rather not be prompted for the key passphrase each time it is used. Add new keypair to SSH agent. Enter ssh-add -K /.ssh/idrsa. You will then be prompted for the passphrase and you will see the following.

May 29, 2018  The WNBC Kodi addon is in the official Kodi repository. To install, load Kodi on your Mac and click addons → download → video addons → WNBC Programs → install. Best Kodi addons for Mac to get free live TV. If you want to use Kodi to see live TV on your Mac. May 18, 2020  Kodi for Mac is a great entertainment center that can deliver the best multimedia experience. It is popular and even received some global awards because it is really as great as you might expect. It is not a perfect app, but it is much better than most similar entertainment apps. Kodi for Mac runs natively on Mac OS X. Mac OS X can provide hardware video decoding for H.264 and MPEG2 video, though most CPUs are able to software decode other formats in 1080 as well. Macs can use the Apple TV remote, among others, for control of Kodi. An Intel Mac. Kodi para mac sierra. May 28, 2019  Kodi for Mac is something that Mac users would love to have. Imagine the union of one of the best operating system with one of the best online streaming software; MacOS and Kodi! Sounds great, right? It is indeed an awesome experience, having Kodi for Mac OS because of the functionalities and features. It is a better option for users who prefer. Jan 04, 2018  About Kodi. Kodi is a free and open source media player application developed by the XBMC Foundation, a non-profit technology consortium. Kodi is available for multiple operating-systems and hardware platforms, featuring a 10-foot user interface for use with televisions and remote controls.

in ~/.ssh/config add the following to the end of the file, to allow usage of the Apple Keychain for SSH:

This simply allows the usage of the stored Public Key passphrase in the Keychain for all hosts.

Note: You can specify this setting for specific hosts too if you want to, by replacing the asterix with the hostname and/or IP address for the host.

Apparently this was a change done in macOS Sierra, and I don’t know why I haven’t come across it before now!

Enter Passphrase For Key Macos Sierra Vista

Related Posts

  • macOS: Secure Pipes —
  • macOS: Hiding Menu Bar Icons With Dozer —
  • macOS: Split Tunnel L2TP VPN Routing —
  • macOS: Using Custom DNS Resolvers —
  • macOS: Using and creating Multi-Output Sound Devices —
Key
Post last updated on June 5, 2020: Fix Hugo shortcode insertion.

These advanced steps are for system administrators and others who are familiar with the command line.

Create a FileVault master keychain

  1. Open the Terminal app on your Mac, then enter this command:
  2. When prompted, enter the master password for the new keychain, then enter it again when prompted to retype. Terminal doesn't show the password as you type.
  3. A key pair is generated, and a file named FileVaultMaster.keychain is saved to your desktop. Copy this file to a secure location, such an encrypted disk image on an external drive. This secure copy is the private recovery key that can unlock the startup disk of any Mac set up to use the FileVault master keychain. It is not for distribution.

In the next section, you will update the FileVaultMaster.keychain file that is still on your desktop. You can then deploy that keychain to Mac computers in your institution.

Remove the private key from the master keychain

After creating the FileVault master keychain, follow these steps to prepare a copy of it for deployment:

  1. Double-click the FileVaultMaster.keychain file on your desktop. The Keychain Access app opens.
  2. In the Keychain Access sidebar, select FileVaultMaster. If you see more than two items listed on the right, select another keychain in the sidebar, then select FileVaultMaster again to refresh the list.
  3. If the FileVaultMaster keychain is locked, click in the upper-left corner of Keychain Access, then enter the master password you created.
  4. From the two items shown on the right, select the one identified as ”private key” in the Kind column:
  5. Delete the private key: Choose Edit > Delete from the menu bar, enter the keychain master password, then click Delete when asked to confirm.
  6. Quit Keychain Access.

Now that the master keychain on your desktop no longer contains the private key, it's ready for deployment.

Deploy the updated master keychain on each Mac

After removing the private key from the keychain, follow these steps on each Mac that you want to be able to unlock with your private key.

  1. Put a copy of the updated FileVaultMaster.keychain file in the /Library/Keychains/ folder.
  2. Open the Terminal app and enter both of the following commands. These commands make sure that the file's permissions are set to -rw-r--r-- and the file is owned by root and assigned to the group named wheel.
  3. If FileVault is already turned on, enter this command in Terminal:
  4. If FileVault is turned off, open Security & Privacy preferences and turn on FileVault. You should see a message that a recovery key has been set by your company, school, or institution. Click Continue.

This completes the process. If a user forgets their macOS user account password and can't log in to their Mac, you can use the private key to unlock their disk.

Use the private key to unlock a user's startup disk

If a user forgot their account password and can't log in to their Mac, you can use the private recovery key to unlock their startup disk and access its FileVault-encrypted data.

Download Mac OS X VMWARE Images. Download Mac OS X Snow Leopard 10.6.8. Download Mac OS X Mountain Lion 10.8.5. Download Mac OS X Mavericks 10.9.5. Download Mac OS X Yosemite 10.10.5. Download Mac OS X El Capitan 10.11.5. Download Mac OS X Sierra 10.12 Beta version. Mar 16, 2016  Download Mac OS X Lion 10.7.5.DMG – Mac OS X Lion 10.7.5.ISO – OS X Lion 10.7.5 torrent – Retail DVD uploaded. Clearly, OS X Lion 10.7.x is no longer downloadable from Apple store. However, many our visitors still request this very old version for education purposes. Vmware for mac os x 10.7.5ker mac os x 10 7 5. Sep 28, 2012  Support for Mac OS X 10.7.5 has been introduced for product: ESXi 5.1 For more information about software and hardware support, please check the VMware Compatibility Guide. Sep 25, 2014  VMware Fusion 7 is not supported on lower then OS X 10.8.0 therefore you will not be able to trial VMware Fusion 7 however you could trial VMware Fusion 6 (Download VMware Fusion 6).). Then if you'd like to purchase a license you'd have to purchase one for VMware Fusion 7 and then downgrade it to a VMware Fusion 6 license.

  1. On the client Mac, start up from macOS Recovery by holding Command-R during startup.
  2. If you don't know the name (such as Macintosh HD) and format of the startup disk, open Disk Utility from the macOS Utilities window, then check the information Disk Utility shows for that volume on the right. If you see ”CoreStorage Logical Volume Group” instead of ”APFS Volume” or ”Mac OS Extended,” the format is Mac OS Extended. You will need this information in a later step. Quit Disk Utility when done.
  3. Connect the external drive that contains the private recovery key.
  4. From the menu bar in macOS Recovery, choose Utilities > Terminal.
  5. If you stored the private recovery key in an encrypted disk image, use the following command in Terminal to mount that image. Replace /path with the path to the disk image, including the .dmg filename extension:
    Example for a disk image named PrivateKey.dmg on a volume named ThumbDrive:
    hdiutil attach /Volumes/ThumbDrive/PrivateKey.dmg
  6. Use the following command to unlock the FileVault master keychain. Replace /path with the path to FileVaultMaster.keychain on the external drive. In this step and all remaining steps, if the keychain is stored in an encrypted disk image, remember to include the name of that image in the path.
    Example for a volume named ThumbDrive:
    security unlock-keychain /Volumes/ThumbDrive/FileVaultMaster.keychain

  7. Enter the master password to unlock the startup disk. If the password is accepted, the command prompt returns.

Continue as described below, based on how the user's startup disk is formatted.

Key

APFS

Mac Enter Passphrase For Key

If the startup disk is formatted for APFS, complete these additional steps:

  1. Enter the following command to unlock the encrypted startup disk. Replace 'name' with the name of the startup volume, and replace /path with the path to FileVaultMaster.keychain on the external drive or disk image:
    Example for a startup volume named Macintosh HD and a recovery-key volume named ThumbDrive:
    diskutil ap unlockVolume 'Macintosh HD' -recoveryKeychain /Volumes/ThumbDrive/FileVaultMaster.keychain
  2. Enter the master password to unlock the keychain and mount the startup disk.
  3. Use command-line tools such as ditto to back up the data on the disk, or quit Terminal and use Disk Utility.

Mac OS Extended (HFS Plus)

If the startup disk is formatted for Mac OS Extended, complete these additional steps:

  1. Enter this command to get a list of drives and CoreStorage volumes:
  2. Select the UUID that appears after “Logical Volume,” then copy it for use in a later step.
    Example: +-> Logical Volume 2F227AED-1398-42F8-804D-882199ABA66B
  3. Use the following command to unlock the encrypted startup disk. Replace UUID with the UUID you copied in the previous step, and replace /path with the path to FileVaultMaster.keychain on the external drive or disk image:
    Example for a recovery-key volume named ThumbDrive:
    diskutil cs unlockVolume 2F227AED-1398-42F8-804D-882199ABA66B -recoveryKeychain /Volumes/ThumbDrive/FileVaultMaster.keychain
  4. Enter the master password to unlock the keychain and mount the startup disk.
  5. Use command-line tools such as ditto to back up the data on the disk. Or quit Terminal and use Disk Utility. Or use the following command to decrypt the unlocked disk and start up from it.
    Example for a recovery-key volume named ThumbDrive:
    diskutil cs decryptVolume 2F227AED-1398-42F8-804D-882199ABA66B -recoveryKeychain /Volumes/ThumbDrive/FileVaultMaster.keychain