Passing ctsProfileMatch

[deleted]

There seems to be an official Google webpage where you can put your GSF ID and have your device pass ctsProfileMatch:
https://www.google.com/android/uncertified

Does it work on GrapheneOS?

vcmj

That appears to be a remnant from a brief period in 2018 where gapps were completely blocked on non certified devices, so it only restored access to play services. I'd love to be wrong though.

[deleted]

vcmj I think it will obviously certify your GSF ID and make your device pass ctsProfileMatch, because there are only 2 Integrity levels in Safetynet/Play Integrity API(s)

ctsProfileMatch
basicIntegrity

Passing ctsProfileMatch is what you need to install/use Netflix, Pokemon GO and Google Pay's NFC feature

[deleted]

[deleted] >

[deleted] because there are only 2 Integrity levels in Safetynet/Play Integrity API(s)

I was wrong about this. While Safetynet has only 2 integrity levels: ctsProfileMatch and basicIntegrity, the Play Integrity API has three integrity levels: MEETS_BASIC_INTEGRITY, MEETS_DEVICE_INTEGRITY and MEETS_STRONG_INTEGRITY

treequell

[deleted] The SafetyNet Attestation API is now obselete and apps mostly use the Play Integrity API. GrapheneOS meets Basic Integrity only. You can share this guide https://grapheneos.org/articles/attestation-compatibility-guide with app developers to help them use Android's hardware attestation API, which is a stronger form of attestation.

[deleted]

treequell Hi,

There seems to be an official Google webpage where you can put your GSF ID and have your device pass ctsProfileMatch:
https://www.google.com/android/uncertified
Does it work on GrapheneOS?

Can you please tell me about this?

Btw ctsProfileMatch of Safetynet is like MEETS_DEVICE_INTEGRITY of Play Integrity API, but Play Integrity API has a even more stronger level called MEETS_STRONG_INTEGRITY.

treequell

The information on https://support.google.com/android/answer/10248227 says:

If your device uses a custom ROM, register your device.

Clicking the link to register your device takes you to the link that you provided above. I have not tried it, but registering it won't make GrapheneOS meet device integrity checks. It would be cool if it did, and would be nice if Google did things this way, but that's not what's happening for now at least.

[deleted]

treequell but that's not what's happening for now at least.

Thanks, but what is the point of "Certifying" your device then, because your can use Google services already on Custom Operating Systems; I think Certifying your device on that page does something cool like passing MEETS_DEVICE_INTEGRITY or at least being able to install apps like Netflix, Pokemon GO, etc.