Hi @meaton, Yes, We have com.apple.managed.vpn.shared entitlement. As mentioned in the problem statement, We are not able to access the keychain item only if we are using user enrolment mode. When we use the Device enrolment mode We are able to access the keychain item and everything works fine. The problem happens only in the user enrolment mode. So far we haven't been able to make it work in user enrolment mode.

Did anyone find a solution for this? We are also having the same issue. I really appreciate any help you can provide.

Did anyone find a solution for this? We are also having the same issue. I really appreciate any help you can provide.

Thanks @brinkin. It's been multiple days and the app still shows as "Not Available for Testing".

Thanks @meaton for sharing the details.

Hi neiljac, Did you find an answer to your question? I am also seeing the issue where includedRoutes and matchdomains are not being honoured in case of Packet Tunnel Per App assigned to chrome app. It works fine when i am using device wide Packet Tunnel. Hi Matt, Could you let us know if this expected and the includedRoutes and matchdomains are ignored when we are using packet tunnel per app mode? Could you please share some docs on this? Any leads would be appreciated. Thanks, Shyam