Ref the CTS mismatch the only way to resolve this was having to root it and install the safety net fix via KernelSU or Magisk. Couldn't install all of the apps I need to use day to day otherwise.Exactly the same with me also
I'm using Kernel SU as you can simply install the APK to check it's compatible, then download and install the anykernel zip file via TWRP that corresponds to the kernel the ROM is using (5.15.74 at time of writing for the latest Xiaomi EU stable ROM and the Xiaomi 13 Ultra) then via the KernelSU or Mrepo apps install zygisk on kernelsu module, safetynet fix module which for me was the 2.4.0 mod 1.3 (2.0 version or the playingegrity 8.5/8.6 didn't work...edit 8.8 is out now so might be working now as of writing).
Also added Shamiko, zygisk lsposed and installed Hidemyapplist APK as I use Lloyds Banking group apps which are a challenge with root detection. Avoids root detection very well for KernelSu Vs Magisk. Created a blacklist template with all the apps to hide and then applied to the banking apps and any root checker tools.
KernelSU need care around applying future OTA updates etc and will need to make sure the anykernel is applied to match any kernel change in the ROM etc so you might find Magisk easier to maintain and use. Magisk stable version didn't work for me with the banking apps though Alpha version did, issue there was zygisk needs to be disabled I think so safetynet was still an issue for me.
Didn't try Delta as I think it also needs zygisk disabled though might be wrong and went the KernelSU route. If I have to end up rooting the device KernelSU gives me a fair bit of control via app profiles and unloading modules on a per app basis without them having superuser access if apps start misbehaving such as Roon remote did. Either way would recommend you know what you're doing with whichever method chosen.
It doesn't pass safetynet check and is not certified pure and simple despite the statement otherwise for the ROM, albeit the Devs response is the CN Mi13 ultra devices they have work fine and they don't get this error whilst multiple users report otherwise.
Have the 16GB/1TB model.
Last edited: