This error will usually appear when there is an issue with the Code Requirement in a Privacy Preferences Policy Control MDM profile. Reviewing the profile and fixing any errors, such as typos or an incorrect Code Requirement, and re-deploying the profile should remediate this error.
These are examples of a correct Code Requirement:
identifier "org.mozilla.firefox" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = "43AQ936H96"
(identifier "com.google.Chrome" or identifier "com.google.Chrome.beta" or identifier "com.google.Chrome.dev" or identifier "com.google.Chrome.canary") and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = EQHXZ8M8AV
Not every Code Requirement will have the same contents given it is unique, however, it should be formatted roughly the same. Here is an example of an improperly formatted Code Requirement:
designated => identifier "org.mozilla.firefox" and anchor apple generic and certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] =
For information on finding the code requirement of an application, see our Knowledge Base article: How To Get The Team ID, Bundle ID, and Code Requirement.