Console flooded with CSSM Exceptions

[daitarn]

Hi, I have this problem with CSSM Exceptions. In some 30 minutes I had over 64.000 of this:

default 11:34:36.663110 +0100 amfid CSSM Exception: -2147411889 CSSMERR_CL_UNKNOWN_TAG
default 11:35:04.224341 +0100 launchservicesd CSSM Exception: -2147411889 CSSMERR_CL_UNKNOWN_TAG
default 11:35:04.254429 +0100 appleeventsd CSSM Exception: -2147411889 CSSMERR_CL_UNKNOWN_TAG
default 11:35:05.227334 +0100 Bartender 2 CSSM Exception: -2147415792 CSSMERR_CSP_INVALID_KEY
default 11:35:05.991515 +0100 tccd CSSM Exception: -2147411889 CSSMERR_CL_UNKNOWN_TAG
default 11:36:07.308955 +0100 launchservicesd CSSM Exception: -2147411889 CSSMERR_CL_UNKNOWN_TAG
default 11:36:12.875897 +0100 usernoted CSSM Exception: -2147411889 CSSMERR_CL_UNKNOWN_TAG
default 11:36:12.903728 +0100 Safari CSSM Exception: -2147411889 CSSMERR_CL_UNKNOWN_TAG
default 11:36:13.292918 +0100 securityd CSSM Exception: -2147411889 CSSMERR_CL_UNKNOWN_TAG
default 11:36:13.419662 +0100 syncdefaultsd CSSM Exception: -2147411889 CSSMERR_CL_UNKNOWN_TAG
default 11:36:13.844357 +0100 tccd CSSM Exception: -2147411889 CSSMERR_CL_UNKNOWN_TAG

Now, I copied just one line per app/process, there are about 15-50 consecutive lines for each app/process.
The problem is that I don't know when they started to appear, so I can't figure out what I did or install to induce
this kind of behaviour.

Mac Pro (mid 2010), Sierra v.10.12.3

Thanks in advance,
Goran

 

[Cory Cooper]

Hello,

CSSM stands for Common Security Services Manager, which works with the security services of macOS Sierra. Most of the time, the exceptions you are seeing are related to old or blank entries in the Keychains of your system.

See Eric's post on this page: https://apple.stackexchange.com/que...eption-in-my-macos-10-12-1-logs/267297#267297.

As always, make sure you have a current Time Machine or other backup before attempting to remedy issues like this.

C

 

[daitarn]

Thanks Cory, I'll try that.

 

[daitarn]

Just to confirm, after deleting some 50 redundant passwords and certificates the things are much better, I have many more duplicates so I just have to...mhhh....do some cleaning, one of those things I don't like so much.

 

[Spawn_Dooley]

I'd recommend Onyx & run the cleaning task every so often ...if you have macOS Sierra make sure you grab that exact version because there is an Onyx version for every Mac OS version!

 

[honestone]

Just to confirm, after deleting some 50 redundant passwords and certificates the things are much better, I have many more duplicates so I just have to...mhhh....do some cleaning, one of those things I don't like so much.

While cleaning is (usually) not a fun exercise, it is important to do that with computers, just like it is with automobiles. Spawn_Dooley's suggestion about Onyx is a good first start (I use it, and it works well), but you should also consider investing in a good commercial disk cleaning/maintenance/repair product like TechTool Pro or Disk Warrior. Either of them will help keep your system "lean, mean, and clean". And of course you should do as much disk cleanup on your own as possible.

When using Onyx, besides all the cleaning tools, you should run its Repair Permissions feature. You'll ned to run that a couple of times, to repair just about all the permissions.

 

[daitarn]

Thank you guys, I know all of that, but still there are tons of leftovers from uninstalled apps, even when you use an app uninstaller, especially in hidden folders like var, and there are many encrypted files so you don't know what you can delete.
I usually do a clean OS install once or twice a year (with newer ones it's better twice), and you can gain some 20% speed overall, at least this were my impressions so far. The problem with Sierra is that you can't just reinstall the OS and copy files from your backup (files from Library folder like App support files, preferences, Pref panels, etc.) because you'll have many problems, so you have to reinstall all apps and drivers and so on.
Security has it's price I guess.

 

[honestone]

I have been using the excellent freeware program AppCleaner when removing an application, and it does a good job of finding most files associated with the application being removed. But yeah, there could be some that it does not find. Recently I have been using the trial version of ClamXav, and when I am done with its scans, I use AppCleaner to remove it. But, when I did that yesterday, and then used EasyFind to search for file with ClamX as part of the name, it did find more. And yes, a number of them were contained within the var folder. I was able to remove them.

As for doing a clean installation of the OS, and then "migrating"/copying stuff from a backup, about 3 days ago, I made the mistake of permanently deleting all the EMails in my In Box (I use Outlook 2016) on my mid 2013 13" MacBook Air running the latest version of Sierra, OS 10.12.3. Fortunately, 1) I had a SuperDuper! backup that was 10 days old, and 2) any "intervening" EMails were not important nor needed. So, after saving some important files, I rebooted the Air from that very recent SuperDuper! backup, use Disk Utility there to Erase and Format my internal SSD, did a clean, "virgin" installation of OS 10.12.3, and then used Migration Assistant to "migrate"/copy stuff from that backup. I then rebooted my Mac, and I was back in business.

So, I'm not sure why you are having issues with restoring apps, drivers, etc. from a backup. Of course, I tend to keep my Macs "lean, clean, and mean", and I do a SuperDuper! backup once a week (along with using Onyx and TechTool Pro).

 

[daitarn]

I'm having problems because I don't use Migration Assistant, I like to copy just the stuff I need, that's how I get the cleanest System, using Migration Assistant just copies junk from an old installation.

My problem is that I like to try apps even if I know I wont ever use them. You can say I'm an app-junkie, right now my App folder is a little over 42 GB, but just the Adobe stuff is 15 Gb, so, you see...
Is there a clinic for such mental disorders?

 

[honestone]

It seems then you need to manage things better. Of course if you run incremental backups numerous times (no matter which backup software you use), then all that extra "junk" will be there. Maybe just do one backup after completely cleaning stuff out you do not absolutely need, like the apps you like to just "play with". Then, do the restore with Migration Assistant. You could just put all the original, uninstalled apps inside a folder before doing the backup.

But, all that is up to you. Myself, if I try and app and don't like it (nor no longer need it), I get rid of it, and as many as the associated files with it.

 

[honestone]

Another solution would be to purchase an external hard drive, and put all your "testing" apps there.