To add on to this topic, the Cloud Console shows Encrypted fields in clear text. Is there any clarification from Apple whether these encrypted fields are being decrypted using the user's key material in the web site or if there is some other issue in the iCloud Console?

I wanted to follow up on this statement in my first post for any other readers: "the root NSManagedObject's record is not being updated with the relationship linkage to the shared record." I figured out later that this is because there are 2 different ways to do shares: you share Records or Zones. The new share functionality in NSPersistentCloudKitContainer appears to be creating full Zone shares unlike the code documented on CKShare. When the Zone share is made there are no relationships created on the records in the zone because they are all made available to the Participants. In terms of the bug with local ckshare being updated, that is still an issue. I haven't tested the suggestion by Fat Xu yet and in the meantime I had to query CloudKit directly (not thru NSPersistentCloudKitContainer) for the most recent ckshare records.

Does Apple read these forums? Or is there a better place to file bugs for their Beta software? It would be nice if we could understand if this was an acknowledged issue with the new release of NSPersistentCloudKitContainer.

One other workaround I found is that the error is related to running the app in the Mac simulator. Changing the simulator to an iPhone device works fine.

Andy, I'm having the same issues. Did you ever get to the bottom of this one? The errors look like this: Failed to sync user keys Failed to set up CloudKit integration for store: <NSSQLCore: