Profiles are incorrectly marked as "Failed"

noahtalerman commented 9 months ago

If you're using Fleet's MDM features, this bug might affect your Fleet.

If you're running into the issue, here's how to resolve it:

Update the Fleet database using the following SQL query, which will cause the failed profiles to be redelivered to the host:

  UPDATE
    host_mdm_apple_profiles
  SET
    status = NULL,
    retries = 0
  WHERE
    status = 'failed' AND
    (detail = 'Failed, was verifying' OR detail = 'Failed, was verified') AND
    host_uuid = 'HOST_UUID';

Replace HOST_UUID with the UUID of the host you want to target.

If you're uncomfortable working with the Fleet database directly, you can download all profiles, remove them from Fleet, and re-add them to resolve the issue.

If you have any questions about these resolution steps, please post a message in our support channel.

Fleet version: 4.42

💥 Actual behavior

In Fleet, several hosts have the majority of their profiles marked as failed when in fact these profiles were installed on the device (one host is here):

Screenshot 2023-12-18 at 3 34 30 PM

sabrinabuckets commented 9 months ago

Possibly a duplicate/may be resolved by https://github.com/fleetdm/fleet/issues/15678

sabrinabuckets commented 9 months ago

Worked with @gillespi314 to validate the fix in my local environment: triggered a Failed status for a profile, and used the SQL query to remediate.

Approved for release.

fleet-release commented 9 months ago

Bug in profile status, Fleet's fix restores the truth, Devices breathe easy.

fleetdm / fleet

Profiles are incorrectly marked as "Failed" #15725

💥 Actual behavior