diff --git a/contrib/osx-launchd/README.md b/contrib/osx-launchd/README.md
new file mode 100644
index 0000000..df68032
--- /dev/null
+++ b/contrib/osx-launchd/README.md
@@ -0,0 +1,139 @@
+Starting NFD on OSX >= 10.8
+===========================
+
+OSX provides a standard way to start system daemons, monitor their health, and restart
+when they die.
+
+Initial setup
+-------------
+
+Edit `net.named-data.nfd` and `net.named-data.nrd` correcting paths for `nfd` and `nfd`
+binaries, configuration file, and log files.
+
+    # Copy launchd.plist for nfd (forwarding daemon)
+    sudo cp net.named-data.nfd.plist /Library/LaunchDaemons/
+    sudo chown root /Library/LaunchDaemons/net.named-data.nfd.plist
+
+    # Copy launchd.plist for nrd (RIB management daemon)
+    sudo cp net.named-data.nrd.plist /Library/LaunchDaemons/
+    sudo chown root /Library/LaunchDaemons/net.named-data.nrd.plist
+
+### Assumptions in the default scripts
+
+* `nfd` and `nrd` are installed into `/usr/local/bin`
+* Configuration file is `/usr/local/etc/ndn/nfd.conf`
+* `nfd` will be run as root
+* `nrd` will be run as user `ndn` and group `ndn`
+* Log files will be written to `/usr/local/var/log/ndn` folder, which is owned by user `ndn`
+
+### Creating users
+
+If `ndn` user does not exists, it needs to be manually created (procedure copied from
+[macports script](https://trac.macports.org/browser/trunk/base/src/port1.0/portutil.tcl)).
+Update uid/gid if 6363 is already used.
+
+    # Create user `ndn`
+    sudo dscl . -create /Users/ndn UniqueID 6363
+
+    # These are implicitly added on Mac OSX Lion.  AuthenticationAuthority
+    # causes the user to be visible in the Users & Groups Preference Pane,
+    # and the others are just noise, so delete them.
+    # https://trac.macports.org/ticket/30168
+    sudo dscl . -delete /Users/ndn AuthenticationAuthority
+    sudo dscl . -delete /Users/ndn PasswordPolicyOptions
+    sudo dscl . -delete /Users/ndn dsAttrTypeNative:KerberosKeys
+    sudo dscl . -delete /Users/ndn dsAttrTypeNative:ShadowHashData
+
+    sudo dscl . -create /Users/ndn RealName "NDN User"
+    sudo dscl . -create /Users/ndn Password "{*}"
+    sudo dscl . -create /Users/ndn PrimaryGroupID 6363
+    sudo dscl . -create /Users/ndn NFSHomeDirectory /var/empty
+    sudo dscl . -create /Users/ndn UserShell /usr/bin/false
+
+    # Create group `ndn`
+    sudo dscl . -create /Groupsndn Password "{*}"
+    sudo dscl . -create /Groups/ndn RealName "NDN User"
+    sudo dscl . -create /Groups/ndn PrimaryGroupID 6363
+
+### Creating folders
+
+Folder `/usr/local/var/log/ndn` should be created and assigned proper user and group:
+
+    sudo mkdir -p /usr/local/var/log/ndn
+    sudo chown -R ndn:ndn /usr/local/var/log/ndn
+
+`HOME` directories for `nfd` and `nrd` should be created and configured with correct
+library's config file and contain proper NDN security credentials for signing Data
+packets.  This is necessary since default private key storage on OSX (`osx-keychain`) does
+not support non-interactive access, and file-based private key storage needs to be used:
+
+    # Generate self-signed NDN certificate for nfd (owned by root)
+    sudo mkdir -p /usr/local/var/lib/ndn/nfd/.ndn
+    sudo sh -c 'echo tpm=file > /usr/local/var/lib/ndn/nfd/.ndn/client.conf'
+    sudo HOME=/usr/local/var/lib/ndn/nfd ndnsec-keygen /localhost/daemons/nfd | \
+      sudo HOME=/usr/local/var/lib/ndn/nfd ndnsec-install-cert -
+
+    # Generate self-signed NDN certificate for nrd (owned by ndn)
+    sudo mkdir -p /usr/local/var/lib/ndn/nrd/.ndn
+    sudo chown -R ndn:ndn /usr/local/var/lib/ndn/nrd
+    sudo -u ndn -g ndn sh -c 'echo tpm=file > /usr/local/var/lib/ndn/nrd/.ndn/client.conf'
+    sudo -u ndn -g ndn HOME=/usr/local/var/lib/ndn/nrd ndnsec-keygen /localhost/daemons/nrd | \
+      sudo -u ndn -g ndn HOME=/usr/local/var/lib/ndn/nrd ndnsec-install-cert -
+
+### Configuring NFD's security
+
+Default sample NFD's configuration allows anybody to create faces, add nexthops to FIB,
+and set strategy choice for namespaces.  While such settings could be a good start, it is
+generally not a good idea to run NFD in this mode.
+
+While thorough discussion about security configuration of NFD is outside the scope of the
+current document, at least the following change should be done to nfd.conf in authorize
+section:
+
+    authorizations
+    {
+      authorize
+      {
+        certfile certs/localhost_daemons_nrd.ndncert
+        privileges
+        {
+            faces
+            fib
+            strategy-choice
+        }
+      }
+
+      authorize
+      {
+        certfile any
+        privileges
+        {
+            faces
+            strategy-choice
+        }
+      }
+    }
+
+While this configuration still allows management of faces and updating strategy choice by
+anybody, only NFD's RIB Manager Daemon (`nrd`) is allowed to manage FIB.
+
+As the final step to make this configuration work, nrd's self-signed certificate needs to
+be exported into `localhost_daemons_nrd.ndncert` file:
+
+    sudo mkdir /usr/local/etc/ndn/certs
+    sudo sh -c 'sudo -u ndn -g ndn HOME=/usr/local/var/lib/ndn/nrd \
+      ndnsec-dump-certificate -i /localhost/daemons/nrd \
+      > /usr/local/etc/ndn/certs/localhost_daemons_nrd.ndncert'
+
+
+Enable auto-start
+-----------------
+
+    sudo launchctl load -w /Library/LaunchDaemons/net.named-data.nfd.plist
+    sudo launchctl load -w /Library/LaunchDaemons/net.named-data.nrd.plist
+
+Disable auto-start
+------------------
+
+    sudo launchctl unload -w /Library/LaunchDaemons/net.named-data.nfd.plist
+    sudo launchctl unload -w /Library/LaunchDaemons/net.named-data.nrd.plist
diff --git a/contrib/osx-launchd/net.named-data.nfd.plist b/contrib/osx-launchd/net.named-data.nfd.plist
new file mode 100644
index 0000000..a8da970
--- /dev/null
+++ b/contrib/osx-launchd/net.named-data.nfd.plist
@@ -0,0 +1,23 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
+"http://www.apple.com/DTDs/PropertyList-1.0.dtd" >
+<plist version='1.0'>
+<dict>
+<key>Label</key><string>net.named-data.nfd</string>
+<key>ProgramArguments</key>
+<array>
+  <string>/usr/local/bin/nfd</string>
+  <string>--config</string>
+  <string>/usr/local/etc/ndn/nfd.conf</string>
+</array>
+<key>EnvironmentVariables</key>
+<dict>
+  <key>HOME</key><string>/usr/local/var/lib/ndn/nfd</string>
+</dict>
+<key>Debug</key><true/>
+<key>Disabled</key><true/>
+<key>KeepAlive</key><true/>
+<key>StandardErrorPath</key><string>/usr/local/var/log/ndn/nfd.log</string>
+<key>ProcessType</key><string>Background</string>
+</dict>
+</plist>
diff --git a/contrib/osx-launchd/net.named-data.nrd.plist b/contrib/osx-launchd/net.named-data.nrd.plist
new file mode 100644
index 0000000..3cd7aaa
--- /dev/null
+++ b/contrib/osx-launchd/net.named-data.nrd.plist
@@ -0,0 +1,25 @@
+<?xml version='1.0' encoding='UTF-8'?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
+"http://www.apple.com/DTDs/PropertyList-1.0.dtd" >
+<plist version='1.0'>
+<dict>
+<key>Label</key><string>net.named-data.nrd</string>
+<key>ProgramArguments</key>
+<array>
+  <string>/usr/local/bin/nrd</string>
+  <string>--config</string>
+  <string>/usr/local/etc/ndn/nfd.conf</string>
+</array>
+<key>UserName</key><string>ndn</string>
+<key>GroupName</key><string>ndn</string>
+<key>EnvironmentVariables</key>
+<dict>
+  <key>HOME</key><string>/usr/local/var/lib/ndn/nrd</string>
+</dict>
+<key>Debug</key><true/>
+<key>Disabled</key><true/>
+<key>KeepAlive</key><true/>
+<key>StandardErrorPath</key><string>/usr/local/var/log/ndn/nrd.log</string>
+<key>ProcessType</key><string>Background</string>
+</dict>
+</plist>