iOS device work items fail to install with "No valid provisioning profile found" (APP_NOT_SIGNED) on osx.15.amd64.iphone.open

[lewing]

Build Information

Build: https://dev.azure.com/dnceng-public/public/_build/results?buildId=1613645
Build error leg or test failing: ios-arm64 Release AllSubsets_NativeAOT_Smoke-iOS.Device.Aot.Test, iOS.Device.ExportManagedSymbols.Test, iOS.Device.ParallelForEachAsync.Test, System.Runtime.Tests
Pull request: #134699

KBE authoring guidance

• Error Details is for readers. Paste the full exception, stack trace, or build error excerpt so the failure is understandable without opening the raw log.
• Build Analysis parses only the single JSON block under Error Message.
• ErrorMessage is a case-sensitive ordinal String.Contains substring copied verbatim from the failing log.
• Set BuildRetry to true only for a clear infrastructure retry case. ExcludeConsoleLog disables Helix console-log scanning.

Error Details

In the ios-arm64 Release AllSubsets_NativeAOT_Smoke leg on osx.15.amd64.iphone.open, every iOS device work item failed to install before any test code ran. The device rejected the app's code signature because no valid provisioning profile was found. XHarness exits with 87 (APP_NOT_SIGNED).

All four work items ran on four different Helix machines within two minutes of each other (2026-09-27 ~03:11–03:14 UTC). That points to a provisioning, certificate or profile problem across the queue rather than to the product or the tests.

ERROR: Failed to install the app on the device. (com.apple.dt.CoreDeviceError error 3002 (0xBBA))
    Unable to Install "iOS.Device.Aot.Test" (IXUserPresentableErrorDomain error 14 (0x0E))
    NSLocalizedRecoverySuggestion = Failed to verify code signature of .../iOS.Device.Aot.Test.app : 0xe8008015 (A valid provisioning profile for this executable was not found.)
    NSLocalizedFailureReason = This app cannot be installed because its integrity could not be verified.
        Failed to verify code signature of .../iOS.Device.Aot.Test.app : 0xe8008015 (A valid provisioning profile for this executable was not found.) (MIInstallerErrorDomain error 13 (0x0D))
        FunctionName = +[MICodeSigningVerifier _validateSignatureAndCopyInfoForURL:withOptions:error:]
        LibMISErrorNumber = -402620395
        LegacyErrorString = ApplicationVerificationFailed
[23:14:26] dbug: Process mlaunch exited with 1
[23:14:26] fail: Failed to install the application
                 No valid provisioning profile found
...
XHarness exit code: 87 (APP_NOT_SIGNED)

Build Analysis matched one of these work items (iOS.Device.Aot.Test) to #123796. That issue tracks a different install failure (NSPOSIXErrorDomain error 49), and its text does not appear in these logs; the other three work items were unmatched. A similar symptom was tracked in #92792, which was closed in January 2024 with a different signature (MT1006).

Error Message

{
  "ErrorMessage": "No valid provisioning profile found",
  "ErrorPattern": "",
  "BuildRetry": false,
  "ExcludeConsoleLog": false
}

Agentic workflow metadata

Workflow artifact: create-kbe
Artifact kind: kbe-verification
Verified match count: 1 hits in failure.log (1 in each of the 4 failing work-item console logs; 0 on [PASS]/[SKIP] lines)

Note

This issue was generated with GitHub Copilot.

Known issue validation

Build: 🔎 https://dev.azure.com/dnceng-public/public/_build/results?buildId=1613645
Error message validated: [No valid provisioning profile found]
Result validation: ✅ Known issue matched with the provided build.
Validation performed at: 9/27/2026 3:27:37 PM UTC

Report

Build	Repository	Test	Pull Request
1613523	dotnet/runtime	System.IO.FileSystem.Tests.WorkItemExecution	#133575
1613645	dotnet/runtime	iOS.Device.Aot.Test.WorkItemExecution	#134699

Summary

24-Hour Hit Count	7-Day Hit Count	1-Month Count
1	2	2

[dotnet-policy-service]

Tagging subscribers to 'os-ios': @vitek-karas, @kotlarmilos, @steveisok, @akoeplinger
See info in area-owners.md if you want to be subscribed.

[dotnet-policy-service]

Tagging subscribers to this area: @dotnet/runtime-infrastructure
See info in area-owners.md if you want to be subscribed.