Company's Device Integrity

TMKI

I recently purchased a Pixel to use with GrapheneOS and I need to use Veridium ID for remote work, but received the following error when registering my device:

Device integrity does not meet the requirements set by your administrator.

I'm assuming this is the case of my company wanting to use the Play Integrity API that I've read about. Has anyone actually talked to their company or anyone about this and gotten them to change their ways? I'm honestly not tech-savvy enough to argue points with my company on tech security, but have been trying to learn about and improve on my digital privacy, so any advice would be appreciated.

Byteang3l

TMKI morally speaking I would say they have some obligation to make a program they require you to use universally functional. Although whether they agree with that perspective is another matter. If they're tech savvy which isn't guaranteed, there's no shortage of threads on here that have people writing various app devs to explain that google play integrity doesn't equal security, I'd argue it's the opposite. So those are definitely worth finding and translating to work with your specific situation. I wish you luck with it, it's hard to get people to budge on things like this. They usually take the path of least resistance. Lastly it might be worth checking the logcat for the app and looking where it coincides with that error, it's likely related to play integrity but can be other things as well.

TMKI

Byteang3l I started reaching out to my IT department about this, and so far their only recommendation is to use another device, but they can't specifically give me a reason why they need to use Google's API. I asked about using Android's hardware attestation API and they just said Google's has replaced it. I might just be stupid (well, I probably am), but it just seems like they don't want to even have to look into it.

Probably9857

TMKI

Yeah...that is not going to be fruitful to pursue. Your realistic options are probably...

Consider if you need to use your phone for work, or if it is only for convenience
If it is truly required, it seems only fair that the company should be willing to provide you a device compatible with the services they require you to use
If they are unwilling to provide you a device, consider if the job is worth investing in a separate device yourself.

Byteang3l

TMKI it could be worth asking them to either provide or reimburse you with a device, depending on where you are I don't think they can make you buy a new device just for their software without either providing or reimbursing it. Also depending on where you are they can either fire you for any reason or they have to provide one to avoid being sued. Obviously I understand you shouldn't share that so my advice can't be very tailored but I think you should look at all your options. You could buy a used low tier but newer Android for relatively cheap but if it's a matter of principle then I'm not sure if that's the best option. At the end it really comes down to you. Regardless I do wish you luck with it.

P. S at the very least if you're forced to buy one with no reimbursement, assuming you're in the US you might be able to deduct it on your taxes? Don't take my word for that but it might help you recoup at least some of it. Also legally it matters if you're W2 or a contractor. Your odds are better as a contractor.