I currently have a bunch of profiles that cannot be removed whatsoever. iOS 18.0 (22A3354), Apple Configurator Version 2.17 (9A15) (happens in the stable configurator version, too) On trying to remove the profiles via Apple Configurator, I get the error message
The profile “[profile name]” does not have the expected certificate for removal. [DMCInstallationErrorDomain – 0xFA8 (4008)]
The problem with that is,
- The profile was installed a day ago using the exact same MacBook that I now try to remove it. Nothing has changed.
- The profile was signed, but it's signed with the same Supervision Identity that I now still have in Apple Configurator. The SHA256 fingerprint I see inside iOS matches the one I see on macOS in the Configurator in the "Show Supervision Identity..." section.
So there should be absolutely no reason why the profile removal fails.
I'm not entirely sure if this is relevant, but the affected profile's PayloadIdentifier has an at-sign in it. The docs say this is supposed to be
A reverse-DNS style identifier (com.example.myprofile, for example) that identifies the profile
so an at-sign might not be valid - but the UI in the Configurator does not have an issue with it.
The only way to get rid of these profiles appears to be a full wipe, which is what I'll do soon. If there is any information I can provide before the wipe (or a better channel to report this on), I'm happy to.