This chapter describes how you can modify your application to handle passwords, keys, and certificates using the Keychain Manager.
Most applications will only need to use high-level Keychain Manager functions. These functions allow you to store and retrieve passwords without unlocking or creating a keychain. You can use these functions to provide secure storage and transparent authentication to any application that uses AppleShare, Internet, or generic passwords.
If you want to manipulate keychain items or their attributes, or change keychain information, however, you will need to call lower-level Keychain Manager functions. These functions require that you unlock the keychain in order to access the items, and that the keychain allow read/write access if you are editing the contents of a keychain. You might use these functions if you are a network administrator writing a logging application that keeps track of network or system events.
The following sections provide an introduction to programming the Keychain Manager using both high- and low-level functions: