Updating Keychain After a Password Change
If a network or mobile account password is changed by an administrator, or if the password expires as part of a directory security policy, the keychain must be updated upon next login. In most cases the OS will prompt the user with the message "The system was unable to unlock your login keychain", followed by these options…
- Continue Log In;
- Create New Keychain; (recommended choice).
- Or, Update Keychain Password
Create New Keychain
Selecting "Create New Keychain" will result in the removal of the original keychain and all associated passwords. Each password will need to be reentered but after that you should never get another prompt except for the initial login screen.
Update Keychain Password
Selecting "Update Keychain Password" and entering the previous password to unlock the keychain, will result in the OS updating the login password accordingly so that services continue to work as expected. If email is tied to the same directory credentials, or if server volumes are set to mount at login (single sign-on excluded), the new password must be entered again to gain access.