Where are custom certificate settings stored on MacOS?

Question

Created Nov ’21

Replies 1

Boosts 0

Participants 2

On BigSur custom settings for the root CA store were saved under /Library/Security/trust settings/Admin.plist On Monterey this has changed but I could not yet find the new location.

Also is there an easy way to change trust settings? When you change trust settings for many root CAs you need to click through them manually, provide password each time ...

Is there some way to easily override the system root CA store? I know you can't change the file itself without disabling SIP. But some way to import a custom CA store while the original one will then be ignored?

Answer 1

Systems Engineer OP

Apple

Nov ’21

Also is there an easy way to change trust settings? When you change trust settings for many root CAs you need to click through them manually, provide password each time ...

This would be the preferred route if not altering the trust settings with a MDM profile.

Regarding:

On Monterey this has changed but I could not yet find the new location.

On macOS 12.0.1 I am still seeing the trust list at: /Library/Security/trust settings/Admin.plist

Matt Eaton
DTS Engineering, CoreOS
meaton3@apple.com