Setup guide

UNCLASSIFIED
certificate must be stored in a keychain. If a credential must be stored on the system,
it should be stored and managed using the Keychain Access utility. The decision to
use keychains should be determined by evaluating policy, operational needs, and
operational environment.
Chapter 6 -
Future Guidance
Keychain Access
Modification of keychains or items within a keychain is performed through the
Keychain Access program, located in the /Applications/Utilities folder.
To make managing keychains easier, showing Keychain status in the menu bar is
recommended:
1. Login to the account of the user whose menu bar is to be modified.
2. Start the Keychain Access program located in the
/Applications/Utilities folder.
3. Select “Show Status in Menu Bar” from the “View” pull-down menu
(Figure 29). This will place a lock icon on the menu bar which will allow
the user to lock and unlock keychains, open the Keychain Access
application, open the Security panel of the System Preferences
application, or lock the screen.
Figure 29 Keychain Access Menu Bar Status
Configuring the login keychain
When a user’s account is first created, a single, default keychain called login is
created for that user. The password for the login keychain is initially set to the user’s
UNCLASSIFIED
75