Migration from SafetyNet Attestation API to Play Integrity API - Android Enterprise

Issue:

Safety Net Attestation will no longer be supported from 01^st June 2024. SOTI will be migrating from using SafetyNet Attestation API to Play Integrity API.  

Cause:

Google has announced that it will be deprecating SafetyNet Attestation API in favor of Play Integrity API.

Resolution:

Customers will need to complete upgrading to Agent version 15.4.0 or higher and Server version

Issue:

Safety Net Attestation will no longer be supported from 01^st June 2024. SOTI will be migrating from using SafetyNet Attestation API to Play Integrity API.  

Cause:

Google has announced that it will be deprecating SafetyNet Attestation API in favor of Play Integrity API.

Resolution:

Customers will need to complete upgrading to Agent version 15.4.0 or higher and Server version 2024.0.0 by 01^st June 2024. These Agent and Server versions will be supporting Play Integrity API changes.

FAQs:

What is the impact?

Customers currently requiring SafetyNet Attestation API for AE enrollments will NOT be able to enroll new devices once Google removes support for SafetyNet Attestation API from 01^st June 2024 unless they start using newer agent and server versions. Customers with alerts or filters based on SafetyNet Attestation status will stop working unless they start using newer agent server versions.

What are the changes?

Play Integrity API uses a different authentication mechanism than SafetyNet Attestation API. Verification and Response formats are different for Play Integrity API which will be handled in new Agent and Server versions that support Play Integrity API. Google will NOT be supporting SafetyNet Attestation API after 01st June 2024. 

What needs to be done?

Customers will need to complete upgrading to Agent version 15.4.0 or higher and Server version 2024.0.0 by 01st June 2024. These Agent and Server versions will be supporting Play Integrity API changes.

What happens to my devices if I do not upgrade to 15.4.0 Agent Version and 2024.0.0 Server version?

SafetyNet Attestation API will continue to work till 01st June 2024. 

SafetyNet Attestation API will continue to be used if only Agent or only Server is upgraded. Both Agent and Server need to be upgraded to switch to Play Integrity.

What happens to my devices if I am unable to upgrade to 15.4.0 Agent Version and 2024.0.0 Server Version?

If you are not able to upgrade to the Agent and Server versions supporting Play Integrity API, then they will need to do one of the following to be able to enroll devices:

• Check the checkbox “Enroll on SafetyNet Attestation Failure” enabled, on the “Add /Edit Device Rules” pane.
• Toggle ON “Enroll Device Even If SafetyNet Attestation Fails” on Enrollment Policy pane. (Image attached for reference)  

Who do I connect with if I face issues during migration?

For more complicated processes like rollbacks, migrations, etc. please contact Professional Services.