SecKeychainItemImport: The specified item already exists in the keychain

1,483 views
Skip to first unread message

Luke Andrews

unread,
Feb 12, 2016, 10:15:10 AM2/12/16
to munki-dev
I'm getting this ERROR every time managedsoftwareupdate is run. As far as I can tell everything is still working, but the ERROR freaks out Help Desk technicians and is annoying in my munkireport. 

managedsoftwareupdate -vvv

Managed Software Update Tool

Copyright 2010-2014 The Munki Project

https://github.com/munki/munki


Starting...

    Performing preflight tasks...

    preflight stdout:     Munkireport: # Executing scripts in preflight_abort.d

    Munkireport: # Executing scripts in preflight.d

    Munkireport: Running submit.preflight

    No CA cert info provided, so nothing to add to System keychain.

    Client cert path: /private/etc/munki/certs/munkiclients.pem

    Client key path:  /private/etc/munki/certs/munkiclients.pem

    Creating client keychain...

    Adding client keychain to search path...

    Importing client cert and key...

ERROR: Could not import /tmp/munki-2FtlmR/combined.pem: 1: security: SecKeychainItemImport: The specified item already exists in the keychain.

    Creating identity preferences...

        "/Library/Managed Installs/Keychains/munki.keychain"

    Adding identity preference for https://server.company.edu/repo/...

    Removing /Library/Managed Installs/Keychains/munki.keychain from search path...

    Completed creation of client keychain at /Library/Managed Installs/Keychains/munki.keychain

    Adding client keychain to search path...


Is this expected behavior or am I doing something wrong? Thanks!

Luke Andrews

unread,
Feb 12, 2016, 10:46:58 AM2/12/16
to munki-dev
I saw the problem after posting here. No need to set the ClientKeyPath with the public and private key in the .pem of the ClientCertifiatePath. I removed the ClientKeyPath from my ManagedInstalls.plist and it is working without error. 
Reply all
Reply to author
Forward
0 new messages