Codex App remote control authorization fails on macOS 12 with OSStatus -25300 keypair error

Summary

Codex App on macOS fails to authorize Remote Control / "Control other devices" after approving the ChatGPT authorization flow. The browser authorization appears to complete, but Codex fails locally while generating the remote-control client keypair.

Environment

• Codex App: 26.616.30709
• Bundled app-server / CLI: 0.142.0-alpha.1
• macOS: 12.7.6 (21H1320)
• Mac: Intel x86_64, MacBook Air 7,2
• Scenario: Mac Codex App attempting to control a Windows Codex host via Settings > Connections > Control other devices

Steps to reproduce

1. Open Codex App on macOS.
2. Go to Settings > Connections > Control other devices.
3. Start remote-control authorization.
4. Approve the authorization on chatgpt.com.
5. Return to Codex.

Expected behavior

Codex enrolls this Mac as a remote-control client and allows selecting/controlling the Windows Codex host.

Actual behavior

The authorization fails with a user-visible "failed to authorize" style error. Retrying with Chrome/Safari does not appear to change the underlying failure.

The local macOS Keychain state was checked/reset: default keychain, login keychain, and user keychain search list all point to login.keychain-db, but Codex still fails to generate the asymmetric keypair.

Sanitized log excerpt

2026-06-18T22:18:45.887Z info [AppServerConnection] Current reported app-server version: currentVersion=0.142.0-alpha.1 hostId=local

2026-06-18T22:19:09.517Z info [remote-control-websocket] remote_control_client_enrollment_start_request hasExistingEnrollment=false ... [account/user/challenge/token identifiers redacted]

2026-06-18T22:19:10.437Z info [remote-control-websocket] remote_control_client_enrollment_start_response hasExistingEnrollment=false ... [account/user/challenge/client identifiers redacted]

2026-06-18T22:19:10.587Z warning [electron-message-handler] [remote-connections/settings] remote_control_authorize_failed errorMessage="The operation couldn’t be completed. (OSStatus error -25300 - failed to generate asymmetric keypair)" errorName=Error errorStack="Error: The operation couldn’t be completed. (OSStatus error -25300 - failed to generate asymmetric keypair)\n    at Object.postMessage (app://-/assets/vscode-api-CISfap9F.js:1:8185)\n    at e.dispatchMessage (app://-/assets/vscode-api-CISfap9F.js:1:8873)\n    at app://-/assets/vscode-api-CISfap9F.js:1:9754\n    at oe (app://-/assets/vscode-api-CISfap9F.js:1:7789)\n    at V (app://-/assets/vscode-api-CISfap9F.js:1:7985)\n    at _.execute (app://-/assets/vscode-api-CISfap9F.js:1:2261)"

2026-06-18T22:19:28.866Z warning [electron-message-handler] [remote-connections/settings] remote_control_authorize_failed errorMessage="The operation couldn’t be completed. (OSStatus error -25300 - failed to generate asymmetric keypair)" errorName=Error errorStack="Error: The operation couldn’t be completed. (OSStatus error -25300 - failed to generate asymmetric keypair)\n    at Object.postMessage (app://-/assets/vscode-api-CISfap9F.js:1:8185)\n    at e.dispatchMessage (app://-/assets/vscode-api-CISfap9F.js:1:8873)\n    at app://-/assets/vscode-api-CISfap9F.js:1:9754\n    at oe (app://-/assets/vscode-api-CISfap9F.js:1:7789)\n    at V (app://-/assets/vscode-api-CISfap9F.js:1:7985)\n    at _.execute (app://-/assets/vscode-api-CISfap9F.js:1:2261)"

Possibly related native-module warning seen in the same session:

warning Failed to reconcile managed Computer Use service appshotsEnabled=true errorCode=ERR_DLOPEN_FAILED errorMessage="dlopen(/Applications/Codex.app/Contents/Resources/native/sky.node, 0x0001): Symbol not found: (_$s10Foundation3URLVMn)\n  Referenced from: '/Applications/Codex.app/Contents/Resources/native/sky.node'\n  Expected in: '/System/Library/Frameworks/Foundation.framework/Versions/C/Foundation'" nodeReplEnabled=false

Notes

• The log suggests the ChatGPT enrollment request/response succeeds before the local keypair generation fails.
• Full logs contain account identifiers, so only a sanitized excerpt is included here.
• The issue may be specific to macOS 12 / older Intel hardware / Keychain APIs used by remote-control enrollment.