Private key is not accessible when device is locked

Privacy & Security General
yingha OP
Created Jan ’24
Replies 1
Boosts 0
Views 642
Participants 2

We have implemented a Notification Service Extension in our app to handle remote notification and access keychain to get certificate and identity to refresh network relay configuration. Using SecItemCopyMatching to get SecIdentityRef works when device is unlocked. Whenever push notification arrives and device is locked, our notification service extension failed to access keychain to get identity reference with error code -25308 errSecInteractionNotAllowed.

It looks like keychain is locked when device is locked. Is there a way to make keychain unlocked?

Answered by yingha in 777161022

Never mind. I just realized that by default keychain items can only be accessed when the device is unlocked and I should set kSecAttrAccessible to kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly.

Replies  1
Boosts  0
Views  642
Participants  2
yingha OP
Jan ’24
Accepted Answer

Never mind. I just realized that by default keychain items can only be accessed when the device is unlocked and I should set kSecAttrAccessible to kSecAttrAccessibleAfterFirstUnlockThisDeviceOnly.

0
Private key is not accessible when device is locked
First post date Last post date
 
 
Q