Allow specific applications to access the auto-enrollment private key(s)
Computer Configuration > Policies > Centrify Settings > Mac OS X Settings > Security & Privacy > Public Key Policies > Allow specific applications to use the auto-enrollment private key(s)
Enabling this policy allows specified applications to access the auto-enrollment private key(s) in System keychain.
After you enable this policy, click Add to enter the path to the application you want to allow access to the auto-enrollment private key, then click OK. You can click Add again to add additional applications.
For example, to give Google Chrome and Centrify Agent access to the auto-enrollment private key, enter the application path for Google Chrome:
Click OK. Then click Add and enter the application path for Centrify Agent:
After this group policy is enabled, the list of applications specified in the group policy are added to the access control list of the auto-enrollment private key in System keychain.
See Configuring auto-enrollment for more information about auto-enrollment keys.
Note: This setting only applies to a new auto-enrollment private key. It does not change auto-enrolled private keys that are already in the keychain.
If the group policy Allow all applications to access the auto-enrollment private key(s) is enabled, this group policy will be ignored.