Move Phone Attestation For Free

Google plans to phase out the SafetyNet Attestation API from June 2023. You can see the timeline here and you need to migrate to the new Play Integrity API for avoid disruption to your business.

In the MobileIron Core Admin Portal, you can enable Google SafetyNet attestation on Android devices to verify the integrity of the devices' software and hardware. This action provides Core with the devices' SafetyNet attestation status. With this status, you can: ? Take actions on untrusted devices.

Demystifying attestation - YouTube YouTube Start of suggested clip End of suggested clip Device attestation allows developers to learn about the security of devices current environment itMoreDevice attestation allows developers to learn about the security of devices current environment it should be used each time a device requests access to potentially sensitive information the

The SafetyNet Attestation API provides a cryptographically-signed attestation, assessing the device's integrity. In order to create the attestation, the API examines the device's software and hardware environment, looking for integrity issues, and comparing it with the reference data for approved Android devices.

This attestation provides assurance that the properties of the device (for example, the serial number) are legitimate (as attested to by the device's Secure Enclave and verified by Apple's servers) and not spoofed.

Using hardware-backed device attestation bolsters security by providing additional verifiable, health checks. It adds a layer of protection against tampering and replay attacks by enabling signing and encryption of Intune MAM client responses.