[Johan Hexnode 7 November 2022 Johan Moderator]

Hey @connor-shaw,
Thanks for reaching out on Hexnode Connect!

Executing the script through Hexnode UEM executes the script with root permission. So, the tilde (~) character tries to fetch the keychain file in the path /private/var/root/Library/Keychains/. You can rectify the script by mentioning the correct path of the keychain file.

Use the script given below to delete the login keychain file. Provide the user account as an argument while deploying the script to target devices.

Script to delete login keychain file

sudo security delete-keychain /Users/$1/Library/Keychains/login.keychain

1	sudo security delete-keychain /Users/$1/Library/Keychains/login.keychain

The script provided above is adapted from third-party Open-Source sites. Therefore, it is advised to manually validate the script execution on a system before executing in bulk.

I hope that helps. Please feel free to contact us for more queries.
Cheers!
Johan Blake
Hexnode UEM

[_patricia_ Participant 10 November 2022 _patricia_ Participant]

What if we require only selected login items to be deleted from the file?

[Johan Hexnode 10 November 2022 Johan Moderator]

Hey @Patricia-Rodriguez,
Thank you for choosing Hexnode Connect!

We can delete specific internet password items from the required keychain file by using the same security command. For example, run the below command to delete a keychain item with the account name “GitLab login”.

Script to delete internet password

sudo security delete-internet-password -a "GitLab login" /Users/$1/Library/Keychains/login.keychain

1	sudo security delete-internet-password -a "GitLab login" /Users/$1/Library/Keychains/login.keychain

Provide the user account as the argument while deploying the script through Hexnode UEM. You can delete internet password items using various filters. For example, replace –a with the following codes to filter out the internet password item. Several of the available filters are listed below:

Code	Meaning	Description
-a	Account	Match account string
-c	Creator	Match creator (four-character code)
-C	Type	Match type (four-character code)
-D	Kind	Match kind string
-G	Value	Match value string (generic attribute)
-j	Comment	Match comment string
-l	Label	Match label string
-s	Service	Match service string