Do I need to request Packet Tunnel Provider entitlement from Apple to get my app working?

A bit more context:

2026-02-18 11:47:51.763041-0600 0x97177    Info        0x0                  209    0    nehelper: [com.apple.networkextension:] Created a new configuration delegate with name = PIA Split Tunnel, bundleID = com.privateinternetaccess.vpn.splittunnel.cli, applicationID = com.privateinternetaccess.vpn.splittunnel.cli, entitled = 1, hasProviderPermission = 1

2026-02-18 11:48:16.576069-0600 0x97177    Info        0x0                  209    0    nehelper: [com.apple.networkextension:] Created a new configuration delegate with name = ***, bundleID = ***, applicationID = ***, entitled = 0, hasProviderPermission = 0

2026-02-18 11:48:16.576142-0600 0x9772a    Error       0x0                  209    0    nehelper: [com.apple.networkextension:] *** Failed to obtain authorization right for 3: no authorization provided

See that entitled = 0, hasProviderPermission = 0?

See my reply here.

everything I'm seeing suggests I need to put in a request to Apple to turn on NetworkExtension

Does “everything I’m seeing” refer to stuff from Apple? Or stuff on the ’net? Because if it’s advice from Apple then I’d appreciate you replying here with info on where you saw Apple give you that advice, because I’d like to correct it.

Sadly, I can’t fix the Internet (-:

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

So I take that as a no I don't need to request anything from Apple and the option in Xcode is all I need?

If so, then there is another issue on my side that I need to track down.

the option in Xcode is all I need?

Correct [1].

there is another issue on my side that I need to track down.

I have a bunch of helpful links in Network Extension Resources. Specifically, check out Debugging a Network Extension Provider.

Share and Enjoy
—
Quinn “The Eskimo!” @ Developer Technical Support @ Apple
let myEmail = "eskimo" + "1" + "@" + "apple.com"

[1] Assuming that:

• You’re creating one you’re part of a paid developer team. See Developer Account Help > Reference > Supported capabilities (iOS).
• You’re creating a packet tunnel provider.
• You’re not concerned with MDM deployment.