Unsafe App Blocked

ST
Shaun T
Zebra (OVS) - Linde GmbH

Hi,

We have an app that google play protect won't install unless we physically press "Install Anyway" 

The message is 

"This app was built for an older version of Android and doesn't include the latest privacy protections

Installing this app may put your device at risk. 

Install Anyway"

Once you click install anyway the app installs fine.

The issues we face is if you don't hit install anyway fast enough the app fails and you need to go into SOTI and push the reinstall starting the process again. This is a huge pain when you manage fleet in the thousands. I fear what will happen if the app is removed from devices in the field and it needs to be redeployed. We cannot expect the end users to manually select "install anyway" If they do see the message at all. 

What can we do within SOTI to force the install?

Device;
Zebra TC56 / 57 

OS Version
8.1.0

Agent Version
2024.0.2.1131

OEM     
02-52-21.00-OG-U09-STD

a year ago
SOTI MobiControl
ANSWERS
MD
Matt Dermody Diamond Contributor
a year ago

Certainly frustrating that Google enforces these sort of consumer protection feature on fully managed enterprise owned devices. In this use case we should be able to bypass these sort of restrictions since they're enterprise owned and locked down assets. Unfortunately thats not the reality however and we're stuck dealing with these kind of issues.

The first thing I would maybe try is to see if you can disable Google Play Protect on the devices and to see if that would then prevent this message from displaying. One issue with that approach however is if that does work I think disabling GPP is a manual process that can't be pushed from an MDM. 

If the GPP disablement doesn't work, you could maybe try and pushing the APK directly to the devices as a Package based install instead of using Managed Play. This assumes you have access to the APK.  If you are dependent on Managed Configurations you can push those as part of an Enterprise app Policy in newer versions of MobiControl without having to route the app install through Managed Play. 

ÖC
Ömercan C.
a year ago

Hi

We also encountered this issue. Ultimately, the manufacturer of the app had to submit a request to Google Play Protect to have the app classified as secure. (Play Protect Appeals Submission)