Fix Mac Error "The system roots keychain cannot be modified"

macos tips
1

I encountered the error message “The system roots keychain cannot be modified” on my MacBook Air when I attempted to modify certificates within my system’s keychain. What causes this error to happen? Anyone can help me to fix this error notification? Thanks a lot!

2

The “The system roots keychain cannot be modified” message usually appears when you attempt to add, delete, or modify certificates within your system’s keychain.

The macOS keychain system is designed to manage your passwords, certificates, and encryption keys securely. The “System Roots” keychain is a protected area within macOS containing trusted root certificates, essential for secure internet connections, app verification, and other system-level tasks.

By default, macOS protects this keychain to prevent any unauthorized changes. The error message indicates that the system’s integrity is being safeguarded, ensuring that no modifications are made without proper permissions.

3

When you encounter this error, it usually means you are trying to make changes that the system does not allow for standard user accounts. It’s important to note that the “System Roots” keychain is controlled at the system level, which means:

  • Only system processes or users with administrative privileges have permission to interact with it.
  • Any unauthorized attempt, even by the administrator, may be blocked to maintain system integrity.

Additionally, if the keychain files become corrupted or the permissions are altered, macOS might block changes even for authorized users.

To fix this error message, you can try the following solutions:

Restart Your Mac
Sometimes, the error might be temporary. Restarting your Mac can refresh the system processes and may clear the error.

Ensure You Have Administrative Privileges
To modify any system-level keychain:

  1. Go to System Settings > Users & Groups.
  2. Ensure your account is listed as an administrator. If not, log in with an admin account.

Use Terminal to Access the Keychain
For advanced users, Terminal can be used to interact with the keychain:

  1. Open Terminal (found in Applications > Utilities).
  2. Enter the following command to open the Keychain Access:
    sudo security unlock-keychain /Library/Keychains/System.keychain
  3. Enter your administrator password when prompted.

This command allows you to access the system keychain with the necessary privileges.

Repair the Keychain
If the keychain permissions are corrupted, you can try to repair them:

  1. Open Keychain Access (found in Applications > Utilities).
  2. Go to the Keychain Access menu and select Keychain First Aid.
  3. Run the tool to identify and fix any issues with the keychain.

Reset the Keychain
If other methods fail, resetting the keychain might help:

  1. Open Keychain Access.
  2. Go to Preferences.
  3. Select Reset My Default Keychains.

Note: This will reset your keychain to its default state and remove stored passwords. Ensure you have backups or know your login credentials before proceeding.

If the issue persists, consulting Apple Support or a professional technician is recommended.