Added sysdiagnose after reproducing the problem on a macOS 27 RC host and VM to FB24608345

I raised FB on the VM so the sysdiagnose is from the guest rather than the host. Let me know if you need the host side too.

Added FB24608345 with some diagnostics from a VM running macOS 27 beta 8 on a host running macOS 26.6.2. I've installed the latest Xcode beta to allow me to build the VM and still hit the APNs issue. More details are in the Markdown document attached to the feedback. Getting this fixed before GA would be good as our automation workflow depends on getting the VM registered with the MDM server so that we can approve network extensions, etc. AI analysis of the VM... The macOS 27 guest's virtualized Secure Enclave fails to generate the BAA attestation keypair (sepk: unable to generate key, kid=0000000000000000). Without BAA certs, apsd's courier connection is refused at the identity step, so APNs never comes up and MDM push is dead. The first profile only installs because enrollment-profile delivery doesn't depend on push.

Still not working with macOS 27 beta 5 26A5406e. Had to install Xcode 27 beta 5 in order to build the VM image on macOS 26.6.1.

I've been having trouble with Fleet MDM enrollment when I have a macOS 27 beta 4 VM (on macOS 26.6 host) as I can enroll, but push notifications don't seem to be working so no profiles are pushed to the VM. Works fine if I have a Tahoe 26.6 VM. All provisioning is done via a packer build with manual operator install of the MDM enrollment profile. Raised FB23918943 about this and will try again with beta 5.

I managed to get Tart to build both public beta and dev beta macOS 27 VMs using the .ipsw files on a MacBook Pro M3 that I upgraded to macOS 26.6 beta 5. I've also installed beta 4 of the command line tools for XCode 27 and they are ok allowing me to continue to build the VMs. Just having issues now pushing config profiles to a VM enrolled to a Fleet MDM server. I can enroll, but I'm unable to get the push notifications in order for the mobileconfigs to be installed. Will raise a ticket for the APNs not working on macOS 27 VM.