Attached the sysdiagnose and crash report files to the bug report

No, it's packaged in a .dmg that the user downloads from the browser every time it needs to be run

I mean it's a one-time run application without an installer. But yeah we investigated setting up the lauchd service and found that it would not work with the setup we have.

Without user interaction? No, that would be a clear violation of platform security policies.  Of course not without user interaction. Ours is a runtime application so implementing a lauchd daemon was not viable last we explored this. We use the SFAuthorization API to escalate privileges where required. The SFAuthorization class gives us an Authorization object that we can pass with other functions. Is there a way we can utilize this Authorization object with the keypair creation?

Is there a way to do this programmatically? SecKeyCreateRandomKey or SecKeyCreatePair do not accept an Authorization object and running the entire application as sudo is not an option

Sorry for opening this up again after all this time. Remove SSID works very smoothly with your suggestion. I was wondering if there is a similar thing that could be done to add SSIDs as well? I see the CWMutableNetworkProfile exists that can handle a lot of the WLAN specific fields. I am basically looking to replace the current setup where I create a mobileconfig file that is pushed using terminal commands. My question is - What is the best way to create a CWMutableNetworkProfile object and add it to a CWMutableConfiguration so that I can commitConfiguration? Attempted Using the same concept as remove SSID and added my MutableNetworkProfile to an NSArray along with the existing profiles - I then set the MutableNetworkProfile to this NSArray and try and commit that. Unfortunately by the end of this most probably long-winded way of doing things, I do not see a network being added in my preferences.