These errors make me think you haven't seen the PSA I put out the other day. If you have deployed your network using the quickstart before yesterday, you'll want to take the actions mentioned in that post. PSA - quickstart change for latest tunnelers and c/python/swift/node sdk
The quickstart had a bug that worked with older ziti-edge-tunnelers but not the latest one. It comes down to modifying a setting in the controller's config file and recreating the "CA" file for the controller (see the post for details).
Once you fix the controller, recreate this identity and reenroll it I think it should be fine.