Failed Device integrity monitoring

Arnauld

Hi,

I received this message the last few days:

"Devices failed to provide valid attestations within 168 hours
Contact photo
From alert@attestation.app on 2022-06-26 23:56
Details Headers
This is an alert for the account 'xxxx'.
The following devices have failed to provide valid attestations before the expiry time:

1Exxxxxx43
Log in to https://attestation.app/ for more information.
If you do not want to receive these alerts and cannot log in to the account,
email contact@attestation.app from the address receiving the alerts."

What can happen and what can I do to resolve this?

Thank you.

lberrymage

Arnauld Check that you don't accidentally have the same device registered multiple times in https://attestation.app. If you re-registered a device without deleting the old attestation pairing, you'll receive failure messages since the old pairing is no longer receiving attestations.

[deleted]

We need an actual error/exception message from the Auditor app on the phone. The email is just an alert, it doesn't tell you the issue like it does on the Auditor app itself.

Check your phone's notifications for a failed remote attestation. Expand the notification and tell us the exception message.

Arnauld

Here is a notification, 30 minutes ago, it seems fine on the phone...

https://wtf.roflcopter.fr/pics/lguLm9Xh/svYBWhJ2.jpg

Arnauld

lberrymage Thank you. No, I never registered my phone twice. When I installed GrapheneOS on my Pixel I set up the Auditor app right after installation and it was working fine until around two weeks ago, I have to check my e-mails to see when the problem began.

Arnauld

My first report (e-mail) "The following devices have failed to provide valid attestations before the expiry time" was on 2022-05-16 22:36.

Arnauld

I clicked on the detailed history in https://attestation.app and here is a part of it.
It seems it is now successfull again (Mon Jun 27 2022) but the verification was not successfull between Mon Jun 27 2022 and Sun May 08 2022 and did not report any verification activity between those two dates (that's why I received the warning e-mails)... That's strange.

Mon Jun 27 2022 23:30:12 GMT+0000 (Coordinated Universal Time)

Successfully performed strong paired verification and identity confirmation.
Hardware verified information (constants omitted):

OS version: 12.0.0
OS patch level: 2022-06
Vendor patch level: 2022-06-05
Boot patch level: 2022-06-05
Verified boot hash: A1xxxxx4B
Information provided by the verified OS:

Auditor app version: 51
User profile secure: yes
Enrolled biometrics: yes
Accessibility service(s) enabled: no
Device administrator(s) enabled: no
Android Debug Bridge enabled: no
Add users from lock screen: no
Disallow new USB peripherals when locked: yes
OEM unlocking allowed: no
Main user account: yes
Mon Jun 27 2022 22:29:53 GMT+0000 (Coordinated Universal Time)

Successfully performed strong paired verification and identity confirmation.
Hardware verified information (constants omitted):

OS version: 12.0.0
OS patch level: 2022-06
Vendor patch level: 2022-06-05
Boot patch level: 2022-06-05
Verified boot hash: Axxxxx4B
Information provided by the verified OS:

Successfully performed strong paired verification and identity confirmation.
Hardware verified information (constants omitted):

OS version: 12.0.0
OS patch level: 2022-06
Vendor patch level: 2022-06-05
Boot patch level: 2022-06-05
Verified boot hash: Axxxxx4B
Information provided by the verified OS:

Auditor app version: 51
User profile secure: yes
Enrolled biometrics: yes
Accessibility service(s) enabled: no
Device administrator(s) enabled: no
Android Debug Bridge enabled: no
Add users from lock screen: no
Disallow new USB peripherals when locked: yes
OEM unlocking allowed: no
Main user account: yes
Sun May 08 2022 20:32:02 GMT+0000 (Coordinated Universal Time)

Successfully performed strong paired verification and identity confirmation.
Hardware verified information (constants omitted):

OS version: 12.0.0
OS patch level: 2022-05
Vendor patch level: 2022-05-05
Boot patch level: 2022-05-05
Verified boot hash: Axxxxx98
Information provided by the verified OS:

Auditor app version: 45
User profile secure: yes
Enrolled biometrics: yes
Accessibility service(s) enabled: no
Device administrator(s) enabled: no
Android Debug Bridge enabled: no
Add users from lock screen: no
Disallow new USB peripherals when locked: yes
OEM unlocking allowed: no
Main user account: yes
Fri May 06 2022 13:43:02 GMT+0000 (Coordinated Universal Time)

Arnauld

I am not sure if it can help understand my problem, but yesterday evening, just before posting my previous message, I updated the frequency of "Verify interval (hours)" to 24 hours and then I could see this message in the Attestation history:

Successfully performed strong paired verification and identity confirmation.

So it seems it solved my problem as I didn''t receive warning e-mails today. I will wait 165 hours though as I chose this value for the "Permitted delay until alerts"

MetropleX

I will mark this as solved unless you let us know otherwise. 🤞