Smart-ID works well on GrapheneOS

uthunku

Unfprtunately I wasn't quick enough to respond to the previous thread to say that Smart-ID, in fact, works on GrapheneOS.

Both my friend and I were using it (although I stopped some time ago). We've visited our bank (Swedbank), where they had to manually approve the installation. You can find this option while installing the app.

DeletedUser143

uthunku when you go to bank, what are they doing with the phone? Are they taking it somewhere? Or connect to something via usb?
Do you have to hand the phone to employees?

Niko

I too was able to get Smart-ID working on GrapheneOS. In my case, I had a second phone with up and running Smart-ID. So on the new phone with GrapheneOS I chose that I have an existing Smart-ID and chose the biometric method, where you take a photo of your id card and scan its chip with NFC. Everything works fine, can use it to log into my bank.

[deleted]

Just wanted to report that mine seems to work too, but it does label my Pixel with 'CTS mismatch', provides a further reading.

I fall under 'limited access' category, ostensibly because my Pixel only passes MEETS_BASIC_INTEGRITY (my guess). They don't say what limited access means though. If either @uthunku or @Niko could chime in here with their experiences I would appreciate it.

[deleted]

[deleted] CTS mismatch warning went away by itself along with the link above (I expect nothing less of government adjacent security solutions) but I guess my question still stands: Do you experience any limitations when using it?

muyrety

The only method (besides going to a bank branch) I could register with was using biometric verification (scanning the passport with nfc, taking a photo of it and your face). That did NOT work. It used the play integrity api and exited with a INVALID_DEVICE error. I can't say if it uses the play integrity api for confirmation when registering using other means, except for bank authentication in a bank office. That worked. I can't say for other banks, but with seb the workers didn't take my phone or plug anything into it, I just gave them my passport and the number that appeared in smart-id when registering. Having an existing smart-id (that was registered in a bank office) may also work for confirming the registration altough I haven't tried that.

thrashwerk

muyrety Same here.

Recently bought a Pixel 8a, installed GrapheneOS, tried setting up Smart-ID on it with the biometric method but it didn't work, got a "Registration method unsupported on this app version RobApi.INVALID_DEVICE" and a notification of it using the Play Integrity API after scanning the ID card.
"Exploit protection compatibility mode" didn't help.

Can't really try other methods now since I don't have Mobile-ID anymore and the local Telia place doesn't do them on saturdays.
Can't use my existing Smart-ID on my old phone because even though it's fully qualified it was not registered at a bank office.

I'll try getting a Mobile-ID and see if it works.

thrashwerk

Got Mobile-ID today and was able to set up Smart-ID using it.

Only thing I needed to do was give Google Play Service the SMS permission because Smart-ID needs to read a one time password it sends to you. Can probably remove the permission afterwards.