Skip Navigation

Configuring attestation for
Android
devices and
BlackBerry Dynamics
apps

You can use
Google Play Integrity
attestation to have
BlackBerry UEM
send challenges to test the authenticity and integrity of
Android
devices and
BlackBerry Dynamics
apps.
Play Integrity
attestation helps you assess the security and compatibility of the environments where your organization's apps run. You can use
Play Integrity
attestation in addition to
BlackBerry
’s existing root and exploitation detection. You can configure and assign a
UEM
compliance profile to carry out appropriate compliance actions when devices or apps fail attestation.
UEM
uses the
Play Integrity
API with the
UEM Client
provide additional protection from application tampering.
Play Integrity
replaces
SafetyNet
attestation.
Google
disabled
SafetyNet
attestation in Janurary 2025, so it is no longer supported by
UEM
. If your organization still uses
SafetyNet
attestation, you should transition to
Play Integrity
attestation.
UEM
performs
Play Integrity
attestation in the following circumstances:
  • After device activation when the
    UEM Client
    is installed.
  • During and after the activation of
    BlackBerry Dynamics
    apps. Note that
    UEM
    does not trust old versions of apps. To pass attestation challenges, devices must have the latest available version of
    BlackBerry Dynamics
    apps.
  • On demand using REST APIs.
  • If the
    UEM Client
    is activated, when a device is restarted.
  • Periodic attestation challenges using the challenge frequency that you specify.
The
UEM Client
is not required for you to enable
Play Integrity
attestation. The
UEM Client
does not appear in the list of
BlackBerry Dynamics
apps that you can configure for
Play Integrity
attestation, but it does receive and respond to attestation challenges from
UEM
.
If a user's device is out of coverage, turned off, or has a dead battery, it cannot respond to attestation challenges. In these circumstances,
UEM
will consider the device to be out of compliance and will carry out the actions that you've configured in the assigned compliance profile.