Profiles are incorrectly marked as "Failed"

[noahtalerman]

If you're using Fleet's MDM features, this bug might affect your Fleet.

If you're running into the issue, here's how to resolve it:

Update the Fleet database using the following SQL query, which will cause the failed profiles to be
redelivered to the host:

UPDATE
  host_mdm_apple_profiles
SET
  status = NULL,
  retries = 0
WHERE
  status = 'failed' AND
  (detail = 'Failed, was verifying' OR detail = 'Failed, was verified') AND
  host_uuid = 'HOST_UUID';

Replace HOST_UUID with the UUID of the host you want to target.

If you're uncomfortable working with the Fleet database directly, you can download all profiles, remove them from Fleet, and re-add them to resolve the issue.

If you have any questions about these resolution steps, please post a message in our support channel.

---

Fleet version: 4.42

---

💥  Actual behavior

In Fleet, several hosts have the majority of their profiles marked as failed when in fact these profiles were installed on the device (one host is here):

[sabrinabuckets]

Possibly a duplicate/may be resolved by #15678

[sabrinabuckets]

Worked with @gillespi314 to validate the fix in my local environment: triggered a Failed status for a profile, and used the SQL query to remediate.

Approved for release.

[fleet-release]

Bug in profile status,
Fleet's fix restores the truth,
Devices breathe easy.