I’ve been running Rancher-Desktop for several years without an issue on my MacBook Pro with an Apple M1 Chip. Randomly, it stopped working last week - it always says starting Kubernetes fails while it was Installing CA Certificates. Possibly it coincided with me updating my macOS password and restarting. This is a work computer - I think they modify the root certificates/truststores periodically, so possibly they made some changes there that have caused this issue. I’m on macOS 15.6.1 and Rancher Desktop 1.20.1. LMK what else Here’s the end of the lima.log:

time="2025-11-10T22:15:29-05:00" level=debug msg="executing ssh (may take a long)): [/usr/bin/ssh -F /dev/null -o IdentityFile=\"/Users/***/Library/Application Support/rancher-desktop/lima/_config/user\" -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o NoHostAuthenticationForLocalhost=yes -o PreferredAuthentications=publickey -o Compression=no -o BatchMode=yes -o IdentitiesOnly=yes -o GSSAPIAuthentication=no -o Ciphers=\"^aes128-gcm@openssh.com,aes256-gcm@openssh.com\" -o User=*** -o ControlMaster=auto -o ControlPath=\"/Users/***/Library/Application Support/rancher-desktop/lima/0/ssh.sock\" -o ControlPersist=yes -o LogLevel=ERROR -p 56431 127.0.0.1 -- cd . || exit 1 ; exec \"$SHELL\" --login -c 'sudo /bin/sh -c '\"'\"'rm -f /usr/local/share/ca-certificates/rd-*.crt'\"'\"'']"

2025-11-11T03:15:29.483Z: > limactl --debug copy /var/folders/nt/dv2j9d3s5bj0q1krmfv0dx_00000gp/T/rd-ca-lmckM5/certs.tar 0:/tmp/certs.tar
$ l [Error]: /Applications/Rancher <http://Desktop.app/Contents/Resources/resources/darwin/lima/bin/limactl|Desktop.app/Contents/Resources/resources/darwin/lima/bin/limactl> exited with code 1
    at ChildProcess.<anonymous> (file:///Applications/Rancher%20Desktop.app/Contents/Resources/app.asar/dist/app/background.js:2:69718)
    at ChildProcess.emit (node:events:518:28)
    at ChildProcess._handle.onexit (node:internal/child_process:293:12) {
  command: [
    '/Applications/Rancher <http://Desktop.app/Contents/Resources/resources/darwin/lima/bin/limactl|Desktop.app/Contents/Resources/resources/darwin/lima/bin/limactl>',
    '--debug',
    'copy',
    '/var/folders/nt/dv2j9d3s5bj0q1krmfv0dx_00000gp/T/rd-ca-lmckM5/certs.tar',
    '0:/tmp/certs.tar'
  ],
  stdout: '',
  stderr: 'time="2025-11-10T22:15:29-05:00" level=debug msg="OpenSSH version 9.9.2 detected, is GSSAPI supported: true"\n' +
    'time="2025-11-10T22:15:29-05:00" level=debug msg="ResolveVMType: resolved VMType \\"vz\\" (explicitly specified in []*LimaYAML{o,y,d}[1])"\n' +
    'time="2025-11-10T22:15:29-05:00" level=debug msg="Failed to detect CPU features. Assuming that AES acceleration is available on this Apple silicon."\n' +
    'time="2025-11-10T22:15:29-05:00" level=debug msg="AES accelerator seems available, prioritizing <mailto:aes128-gcm@openssh.com|aes128-gcm@openssh.com> and <mailto:aes256-gcm@openssh.com|aes256-gcm@openssh.com>"\n' +
    'time="2025-11-10T22:15:29-05:00" level=debug msg="executing scp (may take a long time): [/usr/bin/scp -F /dev/null -o IdentityFile=\\"/Users/***/Library/Application Support/rancher-desktop/lima/_config/user\\" -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o NoHostAuthenticationForLocalhost=yes -o PreferredAuthentications=publickey -o Compression=no -o BatchMode=yes -o IdentitiesOnly=yes -o GSSAPIAuthentication=no -o Ciphers=\\"^aes128-gcm@openssh.com,aes256-gcm@openssh.com\\" -o User=*** -o ControlMaster=auto -o ControlPath=\\"/Users/***/Library/Application Support/rancher-desktop/lima/0/ssh.sock\\" -o ControlPersist=yes -v -3 -- /var/folders/nt/dv2j9d3s5bj0q1krmfv0dx_00000gp/T/rd-ca-lmckM5/certs.tar <scp://e5594762@127.0.0.1:56431//tmp/certs.tar>]"\n' +
    'Executing: program /usr/bin/ssh host 127.0.0.1, user e5594762, command sftp\n' +
    'OpenSSH_9.9p2, LibreSSL 3.3.6\r\n' +
    'debug1: Reading configuration data /dev/null\r\n' +
    'debug1: Authenticator provider $SSH_SK_PROVIDER did not resolve; disabling\r\n' +
    "debug1: auto-mux: Trying existing master at '/Users/***/Library/Application Support/rancher-desktop/lima/0/ssh.sock'\r\n" +
    'debug1: mux_client_request_session: master session id: 3\r\n' +
    '/usr/bin/scp: write remote "/tmp/certs.tar": Failure\r\n' +
    '/usr/bin/scp: debug1: truncating at 261120\r\n' +
    '/usr/bin/scp: failed to upload file /var/folders/nt/dv2j9d3s5bj0q1krmfv0dx_00000gp/T/rd-ca-lmckM5/certs.tar to /tmp/certs.tar\r\n',
  code: 1,
  signal: undefined,
  [Symbol(child-process.command)]: '/Applications/Rancher <http://Desktop.app/Contents/Resources/resources/darwin/lima/bin/limactl|Desktop.app/Contents/Resources/resources/darwin/lima/bin/limactl> --debug copy /var/folders/nt/dv2j9d3s5bj0q1krmfv0dx_00000gp/T/rd-ca-lmckM5/certs.tar 0:/tmp/certs.tar'
}
2025-11-11T03:15:29.485Z: Progress: errored Installing CA certificates: Error: /Applications/Rancher <http://Desktop.app/Contents/Resources/resources/darwin/lima/bin/limactl|Desktop.app/Contents/Resources/resources/darwin/lima/bin/limactl> exited with code 1