Device Requirement
- Android 10+ (API level 29+/ Q/ Quince Tart).
- Support Google Play Services (GMS).
- For production app, it is required to be installed from Google Play Store.
- The device must be able to receive security updates and has recent security patch level.
- Supports of hardware backed key attestation.
- Supports of NFC.
- Supports of light sensor.
- Device must not be rooted.
- Device must pass Android compatibility test.
- Device bootloader must be locked.
- The application must not be built in a way that allows extraction of native libraries from APKs during installation.
- No hooking framework (e.g. Frida, Xposed) shall be installed on the device or bundled with the app.
Device OS Security Patch Requirement
The attestation and monitoring service implements a granular approach on verifying the security patch level captured by the SDK.
The default device checking rules as follows:
| Brand | Maximum days allowed | Update frequency |
|---|---|---|
| Samsung | 200 | 6 months |
| 110 | 3 months | |
| Xiaomi | 110 | 3 months |
| Oppo | 110 | 3 months |
| Oneplus | 110 | 2-3 months |
| Others | 110 |