keepassxc
keepassxc copied to clipboard
keepassxreboot
Document system-wide NativeMessagingHost for managed MS Edge on macOS
Summary
On managed MS Edge the KeepassXC extension cannot be used when the policy NativeMessagingUserLevelHosts is set to false as the NativeMessagingHost ist installed on user-level.
Examples
With the setting described above the connect button is simply dysfunctional.
This can be fixed by installing the NativeMessagingHost as system-wide. In praxis, the org.keepassxc.keepassxc_browser.json must be placed in the folder /Library/Microsoft/Edge/NativeMessagingHosts instead of ~/Library/Application Support/Microsoft Edge/NativeMessagingHosts.
Context
Browser extension cannot connect to KeepassXC on managed MS Edge on macOS when the MS Edge policy NativeMessagingUserLevelHosts is set to false.
As you said, you need to install the json file in the correct spot. That is the job of the system administrators, though, not us. We documented this for Windows here: https://keepassxc.org/docs/KeePassXC_UserGuide#_advanced_setup
This is standard edge setup for managed environments, not really specific to keepassxc.
It would be great if the documentation at https://keepassxc.org/docs/KeePassXC_UserGuide#_advanced_setup could be extended to list the required actions for macOS.