macOS Diagnostics Hub
macOS Digital Signature & Keychain Diagnostics
macOS signing problems usually live in the Keychain identity-preference layer or in the CryptoTokenKit / SmartCardServices stack. We trace the request through each layer and identify exactly where the handoff breaks.
Symptoms we triage
- Keychain Access does not show smart-card certificates
- Safari does not prompt for client certificate
- Acrobat on macOS marks signature invalid
- DocuSign in-person signing fails on MacBook
- Token works after reboot but breaks within hours
Diagnostic flow
1. List smart-card identities
sc_auth identitiesExpected: Card certificates with hashes
2. Pair card to a user
sc_auth pair -u user -h <hash>Expected: Pairing completes without error
3. Inspect SmartCardServices log
log show --predicate 'subsystem == "com.apple.CryptoTokenKit"' --last 1hExpected: Token registration events present
OS coverage
macOS Sonoma / Sequoia
- • macOS Sonoma 14.x signing behaviour
- • macOS Sequoia 15.x privacy & TCC prompts
- • CryptoTokenKit extension registration
Frequently asked
Do you support Apple silicon (M1–M4)?
Yes. All diagnostics cover Apple silicon and Intel Macs on supported macOS versions.
Related services
Related diagnostics hubs that often share the same root cause.
Ready for a structured macOS diagnostic?
Independent consulting, screen-shared remote session, written remediation summary.