15.9.9 Not passing device Integrity

Question

15.9.9 Not passing device Integrity

Closed this issue 4 months ago · 19 comments

Hello,

After upgrading from 15.9.8 using chiron crdroid with Android 13, clearing data from google play services, play store and gms, and rebooting, the device is still not passing the device integrity.

Thanks in advance !

Answer 1 · 2024-05-27T10:23:41.000Z

fingerprint is banned in the latest release

Answer 2 · 2024-05-27T11:10:34.000Z

Thanks; On 15.9.9?

So the only thing we can do is to wait for the next release?

Answer 3 · 2024-05-27T12:53:28.000Z

Thanks; On 15.9.9?

So the only thing we can do is to wait for the next release?

yes, when there is a new release, the error will be fixed

Answer 4 · 2024-05-27T12:55:44.000Z

I'm passing DEVICE using 15.9.9

Answer 5 · 2024-05-27T13:08:36.000Z

15.9.9 doesn't work for me but the last 5 months all worked well so i thank you for that!

Answer 6 · 2024-05-27T13:37:51.000Z

Thanks; On 15.9.9?
So the only thing we can do is to wait for the next release?

yes, when there is a new release, the error will be fixed

But... Having seen how google acts, for how long the next version could work, hours? Days? ... Minutes ? 8-/

There is not any other way to fix it?

Answer 7 · 2024-05-27T19:13:44.000Z

15.9.9 doesn't work for me but the last 5 months all worked well so i thank you for that!

I don't know, it worked for me on my poco x3 pro until google banned fingerprint

Answer 8 · 2024-05-27T19:18:19.000Z

Thanks; On 15.9.9?
So the only thing we can do is to wait for the next release?

yes, when there is a new release, the error will be fixed

But... Having seen how google acts, for how long the next version could work, hours? Days? ... Minutes ? 8-/

There is not any other way to fix it?

see #329 (comment)
(just a hypothesis, but if helpful...)

Answer 9 · 2024-05-28T00:28:45.000Z

Guys this has already been solved, you need to switch to a signed rom, most roms are only signed with test keys. LineageOS is passing device integrity. Maybe someone will find a bypass, maybe not, its more likely the major ROM maintainers will simply start signing the ROMs.

Answer 10 · 2024-05-28T06:03:29.000Z

Guys this has already been solved, you need to switch to a signed rom, most roms are only signed with test keys. LineageOS is passing device integrity. Maybe someone will find a bypass, maybe not, its more likely the major ROM maintainers will simply start signing the ROMs.

Do they?
Their website says if it fails to pass the test, use playintegrity fix.

Answer 11 · 2024-05-28T07:09:45.000Z

Guys this has already been solved, you need to switch to a signed rom, most roms are only signed with test keys. LineageOS is passing device integrity. Maybe someone will find a bypass, maybe not, its more likely the major ROM maintainers will simply start signing the ROMs.

There's more to that than the ROM being signed with test keys, I'm on LOS A13 on raphael which is signed with release-keys, yet it is not passing DEVICE.
edit: apparently build number says release-keys, while otacerts contains test-keys. so disregard this post

Answer 12 · 2024-05-28T07:14:39.000Z

Guys this has already been solved, you need to switch to a signed rom, most roms are only signed with test keys. LineageOS is passing device integrity. Maybe someone will find a bypass, maybe not, its more likely the major ROM maintainers will simply start signing the ROMs.

There's more to that than the ROM being signed with test keys, I'm on LOS A13 on raphael which is signed with release-keys, yet it is not passing DEVICE.

Ahah! Thanks for your clarification... There is too many people on internet that talk as fast as they are able to, to say non-valid answers and to disorient everybody.

I think we need a comprehensive and first-hand explanation about what is going on...

Answer 13 · 2024-05-28T10:27:52.000Z

Disregard that, while the build number says release-keys, the otacerts file contains a testkey.
Sorry for the confusion!

Answer 14 · 2024-05-28T10:38:51.000Z

Ok, so... How to know if the rom is signed with a release key

Answer 15 · 2024-05-28T10:45:36.000Z

Just follow osm0sis' instructions here.

Answer 16 · 2024-05-28T13:39:00.000Z

Ahah ! Thanks

unzip -l /system/etc/security/otacerts.zip
Archive: /system/etc/security/otacerts.zip
Length Date Time Name

 1675  2008-01-01 00:00   testkey.x509.pem

 1675                     1 file

Answer 17 · 2024-05-29T04:13:52.000Z

Guys this has already been solved, you need to switch to a signed rom, most roms are only signed with test keys. LineageOS is passing device integrity. Maybe someone will find a bypass, maybe not, its more likely the major ROM maintainers will simply start signing the ROMs.

Do they?
Their website says if it fails to pass the test, use playintegrity fix.

Yes it won't pass by default, once you use this module it will pass.

Answer 18 · 2024-05-29T04:16:56.000Z

Ahah ! Thanks

unzip -l /system/etc/security/otacerts.zip
Archive: /system/etc/security/otacerts.zip
Length Date Time Name
 1675  2008-01-01 00:00   testkey.x509.pem
 1675                     1 file

Yeah you want a release key, eg: lineage/signing/signing-keys/releasekey.x509.pem

Then after installing this module you will pass device integrity.

Answer 19 · 2024-05-29T08:49:41.000Z

ROM must be signed with maintainer private key.