Issue while attempting to update a per-app-VPN configuration

Question

Created Nov ’22

Replies 0

Boosts 0

Participants 1

Hello All, I am currenlty on iOS version 16.0.2, and have begun seeing some unexpected behaviour when attempting to update a per-app vpn settings. The error I am currently seeing in the following.

`Error chain content: domain = NEConfigurationErrorDomain, error code = 2, description = "configuration is invalid: Duplicate perApp UUID" ( "n/a" ).

This is the initial profile I had sent down to the device (cut for brevity) and installed with no issues.

  <string>globalhttpproxy.profile</string>
  <key>PayloadUUID</key>
  <string>d285f433-2650-457c-875d-19d3f82379eb</string>
  <key>PayloadVersion</key>
  <integer>1</integer>
  <key>PayloadType</key>
  <string>Configuration</string>
  <key>PayloadDescription</key>
  <string>Connectivity Profile set by BEM Web</string>
  <key>PayloadDisplayName</key>
  <string>Connectivity Profile</string>
  <key>PayloadOrganization</key>
  <string>testlab.local</string>
  <key>PayloadContent</key>
  <array>
   <dict>
    <key>PayloadIdentifier</key>
    <string>globalhttpproxy.profile.VPN.59ad7127f4a64ee49aefcd275f90559f</string>
    <key>PayloadUUID</key>
    <string>54cda92e-902b-4676-97ee-14955f16e646</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
    <key>PayloadType</key>
    <string>com.apple.vpn.managed.applayer</string>
    <key>PayloadDescription</key>
    <string>VPN Policy</string>
    <key>PayloadDisplayName</key>
    <string>VPN</string>
    <key>PayloadOrganization</key>
    <string>testlab.local</string>
    <key>UserDefinedName</key>
    <string>par_app_ipsec</string>
    <key>VPNType</key>
    <string>IPSec</string>
    <key>VPNUUID</key>
    <string>5d9fe1dd-8bf4-479a-a1e7-a8bec8f23846</string>
    <key>IPSec</key>

Profile was sent down with no issues.

When attempting to update the profile as I had done previously the above error occured.

  <string>globalhttpproxy.profile</string>
  <key>PayloadUUID</key>
  <string>bdc7a8f8-d6a4-48b6-941d-565d1610d90b</string>
  <key>PayloadVersion</key>
  <integer>1</integer>
  <key>PayloadType</key>
  <string>Configuration</string>
  <key>PayloadDescription</key>
  <string>Connectivity Profile set by BEM Web</string>
  <key>PayloadDisplayName</key>
  <string>Connectivity Profile</string>
  <key>PayloadOrganization</key>
  <string>testlab.local</string>
  <key>PayloadContent</key>
  <array>
   <dict>
    <key>PayloadIdentifier</key>
    <string>globalhttpproxy.profile.VPN.2b5f8f8a52d843bab3aaf0ce3c195815</string>
    <key>PayloadUUID</key>
    <string>dc18e2cd-78a0-41a4-b852-f87643ad324a</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
    <key>PayloadType</key>
    <string>com.apple.vpn.managed.applayer</string>
    <key>PayloadDescription</key>
    <string>VPN Policy</string>
    <key>PayloadDisplayName</key>
    <string>VPN</string>
    <key>PayloadOrganization</key>
    <string>testlab.local</string>
    <key>UserDefinedName</key>
    <string>par_app_iKev2</string>
    <key>VPNType</key>
    <string>IKEv2</string>
    <key>VPNUUID</key>
    <string>5d9fe1dd-8bf4-479a-a1e7-a8bec8f23846</string>
    <key>IKEv2</key>
    <dict>

I had kept the same VPNUUID to prevent the need for me to reinstall the per-app vpns that had come down previously.

Has the rules around updating VPN/profiles changed with 16.0? Or do connectivity profiles now need to be removed before they are updated?

Kind Regards, Hamer

Boost