Fixing Error -108 in macOS: A Complete Repair Guide

What is Error -108 in macOS?

Error code -108 (also displayed as OSStatus error -108) is a system message that appears in macOS when there are issues with a secure connection (SSL/TLS) or incorrect date and time settings. Most often, you'll see it in applications like App Store, iTunes, Safari, or when attempting to connect to secure servers. The message may look like: "The operation couldn’t be completed. (OSStatus error -108.)"

This error is not critical for the entire system, but it prevents installing updates, making purchases in the App Store, playing content in iTunes, and accessing some websites. In most cases, it is resolved with simple steps, which are described in this guide.

Why Does Error -108 Occur?

Main causes:

1. Incorrect date and time — SSL certificates validate the current date on your computer. If the system clock is off or the year is set incorrectly, the certificate is considered invalid.
2. Outdated or corrupted root SSL certificates — macOS stores a list of trusted certificate authorities. If it's outdated or damaged, connections fail verification.
3. Network or firewall issues — A firewall or antivirus may block SSL traffic or intercept certificates.
4. Cached data — An outdated DNS cache or application cache (e.g., App Store) may store incorrect certificate information.
5. Corrupted user profile — Sometimes the problem is related to a specific user's settings on the system.

How to Fix Error -108 in macOS

Follow the steps in the given order. Start with the first one—it resolves most cases.

Step 1: Check and Correct System Date and Time

An incorrect date is the most common cause of error -108. Ensure your clock and calendar are set correctly.

1. Open System Settings (via the Dock or Apple menu).
2. Go to General → Date & Time.
3. Enable the option Set date and time automatically and select a nearby server (e.g., time.apple.com).
4. Ensure the time zone is set correctly (you can enable automatic time zone setting).
5. Close the window.

Check via Terminal: Open Terminal (in Utilities) and run:

date

The command will show the current date and time. If they are incorrect, perform manual synchronization:

sudo sntp -sS time.apple.com

(administrator password required).

After correcting the date, restart your computer and check if the error is gone.

Step 2: Update macOS and Applications

Outdated software may contain obsolete root certificates.

1. Open System Settings → Software Update.
2. Install all available updates, including macOS and security updates.
3. Also update the applications where the error occurs (App Store, iTunes, etc.) via their own update menus.

Important: Some macOS updates (especially major version upgrades) also update root certificates. If you haven't updated your system in a while, this could resolve the issue.

Step 3: Clear Caches and Reset Network Settings

Cached data can interfere with proper SSL connections.

Clear DNS cache:

In Terminal, run:

sudo dscacheutil -flushcache
sudo killall -HUP mDNSResponder

(on macOS 10.10 and later). This clears the DNS cache.

Reset network settings:

1. Open System Settings → Network.
2. Select your active connection (Wi-Fi or Ethernet) and click Advanced.
3. In the TCP/IP tab, click Renew DHCP Lease (if using DHCP).
4. In the DNS tab, remove all servers and add public DNS servers, for example:
   • 8.8.8.8 (Google DNS)
   • 1.1.1.1 (Cloudflare DNS)
5. Click OK and Apply.

Clear App Store cache:

Delete the App Store cache folder:

rm -rf ~/Library/Caches/com.apple.appstore

You can also clear the iTunes cache (if the error occurs there):

rm -rf ~/Library/Caches/com.apple.iTunes

After clearing, restart the application.

Step 4: Check SSL Certificates and Trusted Root Certificates

Ensure macOS trusts the necessary certificates.

1. Open Keychain Access (in Utilities).
2. In the left pane, select System (or All Items).
3. In the search field, type SSL or root.
4. Check for any certificates that have expired (they are marked with a red X). If found, delete them (right-click → Delete).
5. To update the list of root certificates, install the macOS security update (see Step 2). Alternatively, you can manually add missing certificates, but this requires caution.

Check a website's certificate via Terminal:

echo | openssl s_client -connect example.com:443 2>/dev/null | openssl x509 -noout -dates

(replace example.com with the problematic domain). Ensure the dates are valid.

Step 5: Reinstall the Problematic Application

If the error occurs only in a specific application (e.g., App Store or iTunes), try reinstalling it.

For App Store:

• Simply update your system (in Step 2), as App Store is part of macOS.
• If that doesn't help, create a new user (Step 6) and check there. If the error doesn't appear in the new user, the problem is in your profile.

For third-party applications:

1. Delete the application from the Applications folder (drag to Trash).
2. Delete related files in ~/Library/Application Support/ and ~/Library/Preferences/ (search by application name).
3. Download the latest version from the official website and reinstall.

Step 6: Create a New User for Diagnosis

This step helps determine if the error is related to your user settings.

1. Open System Settings → Users & Groups.
2. Click + to add a new user (type Administrator).
3. Log out and log in as the new user (via Apple menu → Log Out → log in as new user).
4. Launch the application where the error occurred and check if it appears.

If the error does not appear, the problem is in your main profile. In this case:

• Delete or rename the folders ~/Library/Preferences/, ~/Library/Caches/, and ~/Library/Application Support/ (make a backup first!). After restarting, the system will create new ones.
• Or gradually transfer data from the old profile to the new one to identify the culprit.

If the Problem Persists

After completing all steps, error -108 may remain if the issue is deeper:

1. Antivirus software or firewall — Temporarily disable any third-party antivirus (e.g., Sophos, Avast) and firewall (Little Snitch). Check if the error disappears. If so, configure exceptions for SSL traffic.
2. Safe Mode — Boot your Mac in Safe Mode (hold Shift during startup). This disables third-party extensions and loads a minimal set. If the error doesn't occur in Safe Mode, some software running at startup is at fault.
3. Disk and permissions check:
   • Launch Disk Utility (in Utilities) and verify the disk for errors.
   • In Terminal, run diskutil verifyPermissions / (on newer macOS versions this command is unnecessary, as permissions are managed automatically).
4. Reset NVRAM/PRAM and SMC — This sometimes helps with hardware and power issues. Instructions vary by Mac model (on T2-equipped laptops: shut down, then hold Option+Command+P+R for 20 seconds).
5. Contact Apple Support — If nothing works, the issue might be hardware-related (e.g., the real-time clock battery is dead on the motherboard) or deep system corruption. Visit an Apple Store or authorized service center.

Preventing Error -108

To avoid the error in the future:

• Regularly update macOS — Enable automatic updates (in System Settings → Software Update).
• Monitor certificate expiration — macOS updates them automatically, but if you use corporate certificates, ensure they are in the trusted list.
• Avoid manually changing system time unless necessary. If needed, use automatic synchronization.
• Avoid installing untrusted software that might interfere with network settings or certificates.

Error -108 is mostly a configuration issue, not a hardware failure. Following this guide will help you restore secure connections and normal operation of App Store, iTunes, and other services.