You must obtain an API key from Google and add it to the app’s AndroidManifest.xml file. The API key has a quota limit of 10,000 requests each day. If necessary, you can use this online form to request an increase to this quota.
For the following sections of the form, select these answers:
  • Method of validating SafetyNet Attestation API responses: Server side - by verifying the signing certificate chain.
  • Method of retrying in case of errors: Something else (or unknown). In the “Anything else that you want to tell us” field, type the following: If the SafetyNet Service responds to the device with a transient error, then the device will retry with an exponential back-off. If the SafetyNet Service responds with a valid blob, but the blob is found to contain an error value when it is decoded, then attestation is retried after 15 minutes. 
In the AndroidManifest.xml file, add the following to the <application> element:
<meta-data android:name="com.blackberry.attestation.ApiKey" android:value="YOUR_API_KEY" />