Related
So I think most of you already know about Google's strict update to their SafetyNet API, which is used by Android Pay, and Pokemon Go among other apps.
If you don't, SafetyNet is a protocol used by Google Play Services that returns whether your device has been "tampered with". Having Root Access, Xposed installed, or a custom ROM or Kernel, have been known to trip this check, which will prevent the apps that utilize SafetyNet's functionality from running on the device.
Several developers on XDA and in the rooting community have been working overtime in an attempt to find a loophole in SafetyNet's code - enter the likes of Magisk and SuHide, each of which no longer work to hide root from SafetyNet as of the date of this writing.
Now, my personal belief is that after a person has purchased an Android device (and in effect that copy of the device's software) they should be free to make any and all modifications they choose to it - at the risk of their own security of course. Additionally, with apps like Pokemon Go, which offer in-game purchases and then change user agreements through app updates which block potential users after they may have made these same in-game purchases, the argument could be made that the SafetyNet API is even promoting fraud.
It isn't my intention to convince anyone of my position, only understand it. At this time, I am trying to gain a better understanding of exactly what elements found on a device prompt SafetyNet to return that a device has been tampered with. I was once rooted, with Xposed installed, but have since uninstalled both, and even re-flashed stock firmware. Even still, the SafetyNet Helper App I have been using for research always returns a failure. For posterity, I am also unable to log into Pokemon Go on stock firmware with no root or Xposed.
If root access is enabled, I have found that the SafetyNet check itself (step 1) will fail and the app will present a red screen, whereas if root access is not installed, the SafetyNet check will pass, but the Device Signature Verification with Google (step 2) will fail, which results in an overall failure where apps like Android Pay and Pokemon Go are concerned. The most modern counter I have found to hide root from SafetyNet is found here but even it states that the device must be able to pass the SafetyNet check on its own before this modifies SuperUser can be installed, so I feel a bit stuck.
I haven't seen anyone address SafetyNet and the Xperia Z5 Compact in the same sentence, and so my question is, can the Z5C pass SafetyNet at all since its most recent update? Please, download the SafetyNet Helper App from the Play Store and run it on your Z5C. Let me know if you get a red screen (failure at first step) a blue screen (failure at second step) or a green screen (passing). Also tell me about your device, and any modifications you have made to it. Seeing as how I can no longer pass the SafetyNet check at all on newly flashed stock firmware, I worry that the Xperia Z5C may not have been given Google's "Device Signiture Verification" - like many other international Android devices.
And if anyone else can shed some light on this situation, I would be most grateful.
Blue screen error.
Krypton custom rom based on .253 with zach's kernel. xposed installed
Sent from my iPad using Tapatalk
What about downgrading Google Play Services? as far as i remember the Safetynet APi is included in this package. Don't know if it is server based or written inside the package, though.
Has anyone found a way to bypass SafetyNet for Nougat?
grayleshy said:
Has anyone found a way to bypass SafetyNet for Nougat?
Click to expand...
Click to collapse
I also want to know this, when running safetynet test it shows me a red screen, even though I already removed root and flashed stock firmware.
rolo143 said:
I also want to know this, when running safetynet test it shows me a red screen, even though I already removed root and flashed stock firmware.
Click to expand...
Click to collapse
because of unlocked bootloader
im using magisksu + magiskhide and its bypassing the safetynet
meistr91 said:
because of unlocked bootloader
Click to expand...
Click to collapse
There is a workaround?
meistr91 said:
because of unlocked bootloader
Click to expand...
Click to collapse
Can I relock it again?
https://forum.xda-developers.com/z5-compact/general/recovery-nougat-7-0-android-bootable-t3609358
rolo143 said:
Can I relock it again?
Click to expand...
Click to collapse
Magisk changes the properties and "relocks" it for you during the start up procedures.
--- previous post
NeoBeum said:
https://forum.xda-developers.com/z5-compact/general/recovery-nougat-7-0-android-bootable-t3609358
Magisk changes the properties and "relocks" it for you during the start up procedures.
Click to expand...
Click to collapse
But magisk requires root. I remove root because there are some games and apps that detect it. So I wanted to pass SafetyNet but still can't.
I have Magisk working, I'm just rebuilding the recovery project and fixing some stuff
Has one been able to patch libandroid to make suhide work on Nougat with security patches after October 2016?
I have CarbonROM 5.1 Moo installed on my Zperia Z5 compact. This along with Magisk 14.3. (And... yeah... As it seems, the Magisk module "Universal SafetyNet Fix" is also required in my case. )
With this, it all works fine. SafetyNet checks out as valid/okay. No problems.
Netflix is not working since I have android 10, I installed from 0 and Netflix doesn't appear in Google play, and official apk doesn't work for me.
Recently CTS won't pass with Magisk installed (even with Magisk hide). Google must have changed SafetyNet rules, Magisk did not catch up yet. It's not clear if this issue is impacting all Magisk users or only some. I can't pass CTS anymore, Android 9.
_mysiak_ said:
Recently CTS won't pass with Magisk installed (even with Magisk hide). Google must have changed SafetyNet rules, Magisk did not catch up yet. It's not clear if this issue is impacting all Magisk users or only some. I can't pass CTS anymore, Android 9.
Click to expand...
Click to collapse
Likewise on stock android 10 for the past 2 or 3 days. No mods installed as such and failing CTS.
Play store is still showing verified device but I hear some users are getting non verified message which will not allow them install certain apps
How about those who become L3 in the attempt to fix sensors of downgraded to Android 9 and flashed persist partition ?
amnher said:
How about those who become L3 in the attempt to fix sensors of downgraded to Android 9 and flashed persist partition ?
Click to expand...
Click to collapse
Probably out of luck, DRM certificates are gone forever. At least that was the case for Mi A1 phone, but seems to be the same for A3.
_mysiak_ said:
Probably out of luck, DRM certificates are gone forever. At least that was the case for Mi A1 phone, but seems to be the same for A3.
Click to expand...
Click to collapse
Will warranty be a solution? Phone is less than two weeks old
amnher said:
Will warranty be a solution? Phone is less than two weeks old
Click to expand...
Click to collapse
No, you screwed it up. As far as I know, service center can't restore DRM keys even if they wanted to, they are flashed in factory and unique to each phone. The only solution is probably to replace whole motherboard. This was the case with Mi A1 and all Sony phones where unlocking of bootloader removed DRM keys as well. Nevertheless, you can try your luck and contact your service center..
_mysiak_ said:
No, you screwed it up. As far as I know, service center can't restore DRM keys even if they wanted to, they are flashed in factory and unique to each phone. The only solution is probably to replace whole motherboard. This was the case with Mi A1 and all Sony phones where unlocking of bootloader removed DRM keys as well. Nevertheless, you can try your luck and contact your service center..
Click to expand...
Click to collapse
This is worst I really did not expect that in messing with persist image really permanently destroys it and I will not be able to enjoy HD videos of Netflix on my a3. Other than that, what are the disadvantages of loosing L1 (messed up DRM) ?
they pulled back the update maybe that's the reason.
and if your device is bootloader unlocked it's also a reason...
i installed Netflix from apkpure.
amnher said:
This is worst I really did not expect that in messing with persist image really permanently destroys it and I will not be able to enjoy HD videos of Netflix on my a3. Other than that, what are the disadvantages of loosing L1 (messed up DRM) ?
Click to expand...
Click to collapse
Yeah, it's unfortunate, many people are advising to "just flash persist.img and it will solve your issues", but it doesn't seem to help in first place and additionally damages the phone beyond repair. Lesson learned for you I guess, don't trust some random folks on the Internet..
Btw. as far as I know, 720p videos should be still playable on Netflix, it affects only full HD and 4K content (which need L1), which you wouldn't enjoy on 720p screen anyway. On Mi A1 I had only L3 (that was the default DRM level) and I did not notice any usability issues, Netflix, Google play music etc. were working nicely. On the small screen I did not notice that Netflix was playing at lower resolution.
_mysiak_ said:
Yeah, it's unfortunate, many people are advising to "just flash persist.img and it will solve your issues", but it doesn't seem to help in first place and additionally damages the phone beyond repair. Lesson learned for you I guess, don't trust some random folks on the Internet..
Btw. as far as I know, 720p videos should be still playable on Netflix, it affects only full HD and 4K content (which need L1), which you wouldn't enjoy on 720p screen anyway. On Mi A1 I had only L3 (that was the default DRM level) and I did not notice any usability issues, Netflix, Google play music etc. were working nicely. On the small screen I did not notice that Netflix was playing at lower resolution.
Click to expand...
Click to collapse
Im at service center and they do not know what DRM is... but they will flash via testpoint i dunno if it will help
amnher said:
Im at service center and they do not know what DRM is... but they will flash via testpoint i dunno if it will help
Click to expand...
Click to collapse
I'm afraid that not, DRM keys are lost already, they would have to generate/obtain new ones. In each case, let us know how it went..
_mysiak_ said:
I'm afraid that not, DRM keys are lost already, they would have to generate/obtain new ones. In each case, let us know how it went..
Click to expand...
Click to collapse
It came back to 10.3.3.0 which is lower than before when i purchase it. Sadly L3 and they opened a brand new mi a3 and it was L1 so they are surprised. The technicial now is tying to do an ota. Though i doubt it will be fixed
Ps. Failed now they will change the motherboard
Check this out:
forum.xda-developers.com/yureka/themes-apps/fix-device-isnt-compatible-version-t3892194
I dunno it helps, but it worked for me
callmegov said:
Check this out:
forum.xda-developers.com/yureka/themes-apps/fix-device-isnt-compatible-version-t3892194
I dunno it helps, but it worked for me
Click to expand...
Click to collapse
It changes these things in build prop, I doubt that it will help with anything for Netflix and even OP says that it's only to show Netflix in playstore (for phone models which are "unsupported" by Netflix officially, which is not the case for Mi A3).
ro.product.model=Pixel 3 XL
ro.product.brand=google
ro.product.name=crosshatch
ro.product.device=crosshatch
ro.product.cpu.abi=arm64-v8a
ro.product.cpu.abilist=arm64-v8a,armeabi-v7a,armeabi
ro.product.cpu.abilist32=armeabi-v7a,armeabi
ro.product.cpu.abilist64=arm64-v8a
ro.product.manufacturer=Google
ro.product.locale=en-US
Basically, f*ck Netflix and Google. We can't even watch the things, even if we want to pay for it, so f*ck them, I'll just download the movies/shows from somewhere else and put it on my SD card.
[Solved]
Hey guys! Good news
:victory: Got Netflix back to work with unlocked bootloader, current Bliss Rom and Magisk installed. :victory:
I believed that ctsProfile failure was the culprit of not being able to install Netflix from Google Play so I get it to pass thanks to @pkdon123 suggestion and files shared by @rudranshrajput and off course some G search. Here's what I've done (not sure if all steps are needed, I went throught it just once):
Solved ctsProfile with flashing two files through Magisk and rebooting.
Used Magisk Hide to hide it from GP and Google Services Framework. Then run SafetyNet check and ctsProfile passed without any issue.
Clear cache and data from both apps - GP and GSF. Then I had to reboot twice to get GP to work again but finally was able to find and install Netflix from there straight away and everything is working perfectly.
Let me know if it works for you guys. Good luck :fingers-crossed:
Horstorm said:
Hey guys! Good news
:victory: Got Netflix back to work with unlocked bootloader, current Bliss Rom and Magisk installed. :victory:
I believed that ctsProfile failure was the culprit of not being able to install Netflix from Google Play so I get it to pass thanks to @pkdon123 suggestion and files shared by @rudranshrajput and off course some G search. Here's what I've done (not sure if all steps are needed, I went throught it just once):
Solved ctsProfile with flashing two files through Magisk and rebooting.
Used Magisk Hide to hide it from GP and Google Services Framework. Then run SafetyNet check and ctsProfile passed without any issue.
Clear cache and data from both apps - GP and GSF. Then I had to reboot twice to get GP to work again but finally was able to find and install Netflix from there straight away and everything is working perfectly.
Let me know if it works for you guys. Good luck :fingers-crossed:
Click to expand...
Click to collapse
Hiding the full play services causes battery drain.
You only need to hide com.google.android.gms.unstable from play services.
All of this is already mentioned in the magisk documentation.
Also Netflix will still work with rooted device you just need to download it from a different source like apkmirror. It doesn't download from the playstore because play store isn't certified which is why we hide it in magisk.
If people took the time to read the applicable documentation then threads like this wouldn't have to exist
garylawwd said:
Hiding the full play services causes battery drain.
You only need to hide com.google.android.gms.unstable from play services.
All of this is already mentioned in the magisk documentation.
Also Netflix will still work with rooted device you just need to download it from a different source like apkmirror. It doesn't download from the playstore because play store isn't certified which is why we hide it in magisk.
If people took the time to read the applicable documentation then threads like this wouldn't have to exist
Click to expand...
Click to collapse
I was having the same exact problem and I solve this problem by enabling magiskhide and doing exactly what you have said I also tested by downloading the apk from the APK mirror and it was working absolutely fine but my problem was that I wouldn't be able to get Netflix updates from the play store also my device was uncertified and I was trying to make it certified which was easily done by flashing magisk also keep in mind that if you have only unlock the bootloader on stock ROM CTS won't pass and device will be non certified so if you want to stay on your stock ROM you need to lock the bootloader but I would suggest that instead of locking the bootloader you can flash magisk and use magisk hide just as a precaution as if she does anything wrong in future ota you can save yourself easily just by having and unlock bootloader.
garylawwd said:
Hiding the full play services causes battery drain.
You only need to hide com.google.android.gms.unstable from play services.
All of this is already mentioned in the magisk documentation.
Also Netflix will still work with rooted device you just need to download it from a different source like apkmirror. It doesn't download from the playstore because play store isn't certified which is why we hide it in magisk.
If people took the time to read the applicable documentation then threads like this wouldn't have to exist
Click to expand...
Click to collapse
Thanks for a suggestion. I didn't read the Magisk documentation and the truth is that I should but 'ain't nobody got time for that'... I consider myself just as an Android enthusiast and spending time to read all documentation I should to install custom rom and get root access would take enormous amount of precious time. I totally agree that If everyone would read the documentation (also write it responsibly) no such forums would be necessary. On the other hand this is why forums like this (Q&A, Guides,...) exist -> to share the knowledge.
And to the actual problem:
I had no clue that it could be actually connected to Magisk itself due to it worked on same device for several months on different custom roms without any issue. That's why I was looking for an answer in the ROM's thread. After disabling full GP Services I didn't notice higher battery drain, but disabling gms.unstable is sufficient. Installing Netflix from other sources is short-term solution which I off course did but I was looking for a solution that will last.
Off Topic: I've noticed that you're quite active in this forum and seems to have the knowledge. Keep it up and keep the patience. Thank you :good:
Flashed the MIUI EU 11.0.6 and cts profile is false but basic integrity shows true. Also, play store shows "device not certified"
I've already used Magisk hide for Google Play services. Tried to re-flash magisk but still the same.
ROM: MIUI 11.0.6 EU Q
Kernel: Sesh 5.1 71Hz
Recovery: Official TWRP recovery
Magisk 20.3
Solution:
https://forum.xda-developers.com/poco-f1/themes/guide-edxposed-miui-11-0-4-android-q-t4050773/page3
MasterFURQAN said:
Flashed the MIUI EU 11.0.6 and cts profile is false but basic integrity shows true. Also, play store shows "device not certified"
I've already used Magisk hide for Google Play services. Tried to re-flash magisk but still the same.
ROM: MIUI 11.0.6 EU Q
Kernel: Sesh 5.1 71Hz
Recovery: Official TWRP recovery
Magisk 20.3
Click to expand...
Click to collapse
Google changed cts from their end. No matter what rom you flash on any phone you use, it'll fail CTS now. Wait for magisk to be updated.
Daruwalla said:
Google changed cts from their end. No matter what rom you flash on any phone you use, it'll fail CTS now. Wait for magisk to be updated.
Click to expand...
Click to collapse
Just read the article. Thanks anyways.
Xposed installed? If yes you should try this module for pass the safetynet
https://forum.xda-developers.com/showpost.php?p=81982121&postcount=80
Works for me
vjbenn said:
Xposed installed? If yes you should try this module for pass the safetynet
https://forum.xda-developers.com/showpost.php?p=81982121&postcount=80
Works for me
Click to expand...
Click to collapse
I found that out some days ago. I forgot to edit the OP.
FYI this module only fakes the status of the CTS profile. You can check your "true" status by using an app called safety net checker from play store.
Tried every one of the exposed module and all fail so that is no good for me...... anything else that will work..... even stock ROMs with unlocked bootloader with out root come up as device uncertified have a realme 5 with locked bootloader and it is fine have LG v20 it's fine and a Asus Zenfone 3 ultra locked no issues have pocof1 unlocked bootloader and it fails...........
It appears it is bootloader unlocked is what the issues is......the problem is you can't lock bootloader if you want custom recovery the problem is if you have a locked bootloader and you get jacked by someone you can't recover your device.......
Or maybe that's what Google wants to happen......
stinka318 said:
Tried every one of the exposed module and all fail so that is no good for me...... anything else that will work..... even stock ROMs with unlocked bootloader with out root come up as device uncertified have a realme 5 with locked bootloader and it is fine have LG v20 it's fine and a Asus Zenfone 3 ultra locked no issues have pocof1 unlocked bootloader and it fails...........
Click to expand...
Click to collapse
Mine passes the CTS check now even without the edXposed module.
stinka318 said:
It appears it is bootloader unlocked is what the issues is......the problem is you can't lock bootloader if you want custom recovery the problem is if you have a locked bootloader and you get jacked by someone you can't recover your device.......
Or maybe that's what Google wants to happen......
Click to expand...
Click to collapse
MasterFURQAN said:
Mine passes the CTS check now even without the edXposed module.
Click to expand...
Click to collapse
Flashed no gravity kernel and my problem went away as well I believe it has something to do with how Google receives information about the bootloader in the kernel.......
It was working ok for me till today. I had the problem with cts profile : false, then it clears from itself (google change something or revert the changes) , but now I checked randomly in magisk manager and this time I got both cts profile false and basic integrity false , so think google change the things again and even more restrictive than previous time , anyone else can confirm ?
Hey there, yesterday I've updated my phone to OOS 10.0.8. Everything went fine, phone is running, but since I've installed that update SafetyNet keeps failing in both, basicIntegrity and ctsProfile.
I have installed Magisk 20.4 and Magisk Manager 7.5.1.
Magisk hide is enabled. I have no modules installed.
Anyone else having this issue or know how to fix it?
Yep, same problem here. Can't seem to fix it either.
Exentric90 said:
Yep, same problem here. Can't seem to fix it either.
Click to expand...
Click to collapse
Do some reading ... https://twitter.com/topjohnwu/status/1237656703929180160
(and for me it is still OK)
foobar66 said:
Do some reading ... https://twitter.com/topjohnwu/status/1237656703929180160
(and for me it is still OK)
Click to expand...
Click to collapse
Yeah I've updated to the beta. So that might be it.
Anyway that sucks. So we're basically screwed if we'd like to have the latest security updates and still keep root.
Sajito said:
Hey there, yesterday I've updated my phone to OOS 10.0.8. Everything went fine, phone is running, but since I've installed that update SafetyNet keeps failing in both, basicIntegrity and ctsProfile.
I have installed Magisk 20.4 and Magisk Manager 7.5.1.
Magisk hide is enabled. I have no modules installed.
Anyone else having this issue or know how to fix it?
Click to expand...
Click to collapse
i have exactly the same configuration, and my safetynet test passes both, cts and basic, as it was before the update
foobar66 said:
Do some reading ... https://twitter.com/topjohnwu/status/1237656703929180160
(and for me it is still OK)
Click to expand...
Click to collapse
I've read about that. I know that since those changes Magisk Hide is not enabled in default installation, that's why I made sure it is enabled on my device. Also as far as I know, those changes should only affect ctsProfile, but not basicIntegration. For me both is failing.
kaiowas82 said:
i have exactly the same configuration, and my safetynet test passes both, cts and basic, as it was before the update
Click to expand...
Click to collapse
But since it's working for you two: Do you use any modules?
Sajito said:
But since it's working for you two: Do you use any modules?
Click to expand...
Click to collapse
systemless hosts and google dialer framework
kaiowas82 said:
systemless hosts and google dialer framework
Click to expand...
Click to collapse
kaiowas82 said:
i have exactly the same configuration, and my safetynet test passes both, cts and basic, as it was before the update
Click to expand...
Click to collapse
I toggled the Magisk hide button in settings and rebooted and it passed both. But, if you click on safetynet a second time it fails. So far I haven't received notification of Google Pay software issue I'm assuming it's good. Guess I'll find out when I go to pay for something at the store.
slapman said:
I toggled the Magisk hide button in settings and rebooted and it passed both. But, if you click on safetynet a second time it fails. So far I haven't received notification of Google Pay software issue I'm assuming it's good. Guess I'll find out when I go to pay for something at the store.
Click to expand...
Click to collapse
just done the test 3 times in a row and always passes, i think you have some other underlying issue
kaiowas82 said:
just done the test 3 times in a row and always passes, i think you have some other underlying issue
Click to expand...
Click to collapse
I have no idea what it could be unless when I did
OTA update from local storage and then restored images on Magisk and installed to inactive slot (after ota). Maybe I should redo the whole thing and use 10.0.8 patched boot.img besides that I have no clue before update had no issues. Anyway I have Viper4android installed OOS native call recording YouTube Vanced and a slew of other modules working so if I can't pay with GP no big deal but it would be nice to have everything working. Be safe stay home and God bless.
I've tried several things that came to my mind, but they all don't work.
So I'll list what I've done, maybe anyone has an idea how to pass SafetyNet again without having to factory reset.
I got the OTA notification, so I downloaded and installed it. Before rebooting I went to Magisk Manager and installed Magisk to the inactive slot.
I forgot to disable the Riru Core and EdXposed Module, but the update went fine.
After the reboot I've noticed that SafetyNet test is failing. I know for sure SafetyNet was succeeding before the udate, since I was playing Pokemon Go before the update. That's impossible while SafetyNet fails.
As I said the weird thing is, both tests are failing, not just ctsProfile. First I made sure Magisk Hide was on and set for all required apps. Also toggled the setting, to make sure it's active. Root hiding is working fine btw.
So I thought maybe having EdXposed installed broke something. I uninstalled EdXposed completely, toggled everything again and rebooted. No luck.
I downloaded the OOS 10.0.8 Update again and installed it through "Locale Update", installed Magisk to inactive partition and rebooted. This time no modules installed at all. Still no luck.
I uninstalled Magisk (completely, not just the manager), rebooted and installed Magisk again. Got root, but the test still failing.
I've not used any module except EdXposed and there's only one Xposed Module I use, to enable background playback for YouTube.
Any ideas what's broken?
I really don't want to factory reset. Alongside Google Pay I use an App from my bank called "Mobiles Bezahlen". It's similar to Google Pay, but it's like using the physical card. Problem with that app is, a card can only be registered 7 times before the app will deny to register that card again. The only way to be able to register my card again is to order a new physical card.
I have not found a way to make a backup of that virtual card.
man i swear i tried somthing and it worked and i pass SafetyNet right now. i'am not a professional and i dont know what exactly i did that fixed the problem. but i will tell you what i did.
- i had some problems with my phone so i did MSM-flashtool it to get it back to clean
- then i installed latest magisk application 7.5.1 from github.
-patched my boot image and flashed it
-i got safetynet check failed.
-i then removed magisk by installing the stock boot image again.
-then i downloaded an older version of magisk which is 7.4.0.
-flashed the same patched boot image again.
WALLAH! i passed safteynet and magisk hide works with bank and google pay apps agian ! <3
-then i updated magisk from the app both manager and magisk zip
-rebooted
-still my safetynet passes! try it and tell me guys!
mastrok said:
man i swear i tried somthing and it worked and i pass SafetyNet right now. i'am not a professional and i dont know what exactly i did that fixed the problem. but i will tell you what i did.
- i had some problems with my phone so i did MSM-flashtool it to get it back to clean
- then i installed latest magisk application 7.5.1 from github.
-patched my boot image and flashed it
-i got safetynet check failed.
-i then removed magisk by installing the stock boot image again.
-then i downloaded an older version of magisk which is 7.4.0.
-flashed the same patched boot image again.
WALLAH! i passed safteynet and magisk hide works with bank and google pay apps agian ! <3
-then i updated magisk from the app both manager and magisk zip
-rebooted
-still my safetynet passes! try it and tell me guys!
Click to expand...
Click to collapse
Very cool, I did something else cause I really like my setup and to tell you the truth I didn't want to go through the whole process again. I did a Google search and found a tutorial on YouTube using edxposed. I followed the tutorial and I passed Safety net I already tested like 5 times but wait a minute... I just tried still passed. Wasn't sure if we can post from other sites but if we can just reply and I will post the link to the video.
mastrok said:
man i swear i tried somthing and it worked and i pass SafetyNet right now. i'am not a professional and i dont know what exactly i did that fixed the problem. but i will tell you what i did.
- i had some problems with my phone so i did MSM-flashtool it to get it back to clean
- then i installed latest magisk application 7.5.1 from github.
-patched my boot image and flashed it
-i got safetynet check failed.
-i then removed magisk by installing the stock boot image again.
-then i downloaded an older version of magisk which is 7.4.0.
-flashed the same patched boot image again.
WALLAH! i passed safteynet and magisk hide works with bank and google pay apps agian ! <3
-then i updated magisk from the app both manager and magisk zip
-rebooted
-still my safetynet passes! try it and tell me guys!
Click to expand...
Click to collapse
How did you install Magisk using 7.4.0? I've installed Magisk Manager 7.4.0, but it doesn't allow me to install Magisk itself without updating first to 7.5.1.
slapman said:
Very cool, I did something else cause I really like my setup and to tell you the truth I didn't want to go through the whole process again. I did a Google search and found a tutorial on YouTube using edxposed. I followed the tutorial and I passed Safety net I already tested like 5 times but wait a minute... I just tried still passed. Wasn't sure if we can post from other sites but if we can just reply and I will post the link to the video.
Click to expand...
Click to collapse
What EdXposed Module are you using? HiddenCore Module? I've tried that. After enabling it the test in Magisk Manager will succeed, but any other SafetyNet Checker fails. Still no Pokemon Go and SafetyNet for me
Sajito said:
How did you install Magisk using 7.4.0? I've installed Magisk Manager 7.4.0, but it doesn't allow me to install Magisk itself without updating first to 7.5.1.
What EdXposed Module are you using? HiddenCore Module? I've tried that. After enabling it the test in Magisk Manager will succeed, but any other SafetyNet Checker fails. Still no Pokemon Go and SafetyNet for me
Click to expand...
Click to collapse
bro just remove any rooting method you have right now. install the old 7.4.0 version. patch your boot image and if you cant try to find the patched image on the internet. flash it via fast boot and your root is successful. now update magisk and you are done
m4str0k said:
bro just remove any rooting method you have right now. install the old 7.4.0 version. patch your boot image and if you cant try to find the patched image on the internet. flash it via fast boot and your root is successful. now update magisk and you are done
Click to expand...
Click to collapse
I tried exactly that, but I can't patch the boot image with 7.4.0, since it tells me I have to update to 7.5.1 first.
edxposed it's the reason why you cannot pass safetynet
kaiowas82 said:
edxposed it's the reason why you cannot pass safetynet
Click to expand...
Click to collapse
As I already said in first post, EdXposed is not installed anymore. I could pass SafetyNet even with EdXposed before the update though.
Also SafetyNet passes with EdXposed installed on my LG G6.
10.3.2 - Device does not meet the minimum security requirements for this application
Hello, there.
I badly need your assistants. I'm not able to use a bank application as it states as "This device does not meet the minimum security requirements for this application", I flashed patched recovery for Magisk Maanger (7.5.1)& the SafetyNet Check shows as "Success". Both ctsProfile & basicIntegrity is green with true against it.
I repacked the Magisk Manager to different and enabled Magisk Hide option; also under "Magisk Hide" section, I have enabled the said bank application but still the above said error message popups. I badly want to access this application. I also face same issue with other gov application.
NOTE: I have other bank app which works perfectly by hiding it under "Magisk Hide" section but some Gov & this bank application doesn't work.
Please help.
vinu4u4ever said:
Hello, there.
I badly need your assistants. I'm not able to use a bank application as it states as "This device does not meet the minimum security requirements for this application", I flashed patched recovery for Magisk Maanger (7.5.1)& the SafetyNet Check shows as "Success". Both ctsProfile & basicIntegrity is green with true against it.
I repacked the Magisk Manager to different and enabled Magisk Hide option; also under "Magisk Hide" section, I have enabled the said bank application but still the above said error message popups. I badly want to access this application. I also face same issue with other gov application.
NOTE: I have other bank app which works perfectly by hiding it under "Magisk Hide" section but some Gov & this bank application doesn't work.
Please help.
Click to expand...
Click to collapse
Use another SafetyNet Checker app to see if SafetyNet really passes on your device.
If it passes then please create another thread for your problem, since it's not related to this thread at all.
Hi to all, this is my first post here on XDA.
I Was doing a little of research to get Safety Net pass on custom rom's (I Have tested this fix on Z Rom V6, Illussion OS 1.7 and Z Rom Lite v2) And by now, here is the solution, It's not a fake screen telling you that you have passed Safety net like the one you get when you use the Hidden Core Method. This is a real fix.
So now, we're using 2 Magisk modules.
1.-safetynet-fix-v1.1.1
2.-MagiskHidePropsConfig-v5.4.0
Ok, after the download of the 2 zips you need to flash through Magisk, (You need to enable MagiskHide) we'll need to use a terminal emulator to get the safety net pass, then after downloading a terminal emulator we need to follow this tutorial:
After that we need to set the new fingerprint of our device to be ''Samsung Galaxy A20 A205W'' After selecting that fingerprint we need to finish the setup, and then Reebot. after that.... Voila, now our device pass Safety Net on custom roms.
Credits to all of the creators of the modules.
Thanks for this info, will try it out once I rooted my phone again.
I cannot find safetynet-fix on magisk modules.
Did they removed it?
In theory magiskhidepropsconfig alone should do the job, sadly i cannot pass ctsProfile test on my phone that has a custom ROM (Xiaomi Mi note 10).
Not out of the box at least.
It has instructions on how to manually change the fingerprint and the security patch date so to pass the ctsProfile test but they are...complicated
I even followed the instructions on the video but still no dice.
Nadaaaaa said:
I cannot find safetynet-fix on magisk modules.
Did they removed it?
In theory magiskhidepropsconfig alone should do the job, sadly i cannot pass ctsProfile test on my phone that has a custom ROM (Xiaomi Mi note 10).
Not out of the box at least.
It has instructions on how to manually change the fingerprint and the security patch date so to pass the ctsProfile test but they are...complicated
I even followed the instructions on the video but still no dice.
Click to expand...
Click to collapse
You should use the .zip file attached to this thread bro, SafetyNet fix is for hardware attestation and unlocked bootloaders, That's why you should use MagiskHidePropsConfig + SafetyNetFix. Google play services must be enabled and not frozen in order to have SafetyNet working. Check if there is a specific fingerprint for your device. And yes, the module has been removed from magisk repository, You can find the latest version here: https://github.com/kdrag0n/safetynet-fix
@PhillipVilla , i am sorry but could you elaborate a bit more?
I have flashed Havoc 4.6 and Magisk v23 onto my Samsung S8+. I have downloaded the two files you attached. But what do you mean by "flash through Magisk"?
My Google Play Store is working fine my problem is no Netflix in Play Store and my TV provider app is not working. So i am trying to get SafetyNET to pass and possibly hide the fact that the phone is rooted.
TheGeneral said:
@PhillipVilla , i am sorry but could you elaborate a bit more?
I have flashed Havoc 4.6 and Magisk v23 onto my Samsung S8+. I have downloaded the two files you attached. But what do you mean by "flash through Magisk"?
My Google Play Store is working fine my problem is no Netflix in Play Store and my TV provider app is not working. So i am trying to get SafetyNET to pass and possibly hide the fact that the phone is rooted.
Click to expand...
Click to collapse
Magisk is an app you should install. You can search in this forum
I have a Moto G6 and I'm having trouble getting the SafetyNet to go green. Installed Magisk v23 and the SafetyNet Fix and the MagiskHidePropConfig and still no dice. Any suggestions?