OS X asks me -- twice -- to enter my admin username and password before it will let me connect to Cisco AnyConnect VPN. This is annoying and unnecessary.

Text of the prompt:

OS X wants to make changes. Type an administrator's name and password to allow this.

OS X wants to use the "System" keychain.

OS X wants to make changes

How can I configure the keychain to allow Cisco VPN access without prompting unnecessarily?


Found the answer on a Google Groups forum:

• Launch /Applications/Utilities/Keychain Access

• Select "System" from the Keychains menu in the upper left

• Select "Certificates" from the Category menu in the lower left

• Find the entry that corelates to your computer's name in the list on the right, and click on the disclosure triangle.

• Secondary click on the "Private Key" entry that appears and select "Get Info" from the contextual menu that appears.

• Select the Access Control tab.

• You can then either add AnyConnect to the the list at the bottom of the screen (more secure, but you will need to repeat this process anytime the version of AnyConnect changes), or toggle the radio button to "Allow all applications to access this item".

A similar answer shows a picture but provides fewer instructions

  • I've looking for this answer for ages! Thanks 🙏 – raed Jul 13 '18 at 8:39
  • This was very useful in pointing me to the right spot; however, for others who may be getting here, the "entry that correlates to your computer's name" was not what worked for me: in my case, adding AnyConnect to the localhost entry did not fix the issue; what did, was adding it to a seeming "random hex" entry. – Marco Dec 1 '18 at 7:22

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.