[TUTORIAL] WORKING FIX FOR SAFETYNET / CTS PROFILE FAILED

[mnemoc]

You also need to "clear all data" of these following apps:

- Google Play store
- Google Play services
- Google Service Framework

Then reboot your device.

If Google Pay still not working, "clear all data" of this app too.

Brilliant! Pay is happy now. Thanks a lot @Poney70!

 

[Defooster]

Thanks so much! My vangogh was on weekly but formatted and stepped down to stable only to realize GPay wasn't working. I only had to clear data on Google Play and it passed Safteynet and GPay works now!

 

[Jayhun]

I have a rooted Redmi S2 with MIUI Global 12.0.2 Stable version. I cant pass cts profile. I installed safetynet fix v2 test2 as safety net fix v1.1.1 didnt install due to CPU error. Still couldnt pass the cts profile. Magiskhide Props Config also installed. Anyone can help me about this issue please? Thanks.

 

[katerpanne]

I have a rooted Redmi S2 with MIUI Global 12.0.2 Stable version. I cant pass cts profile. I installed safetynet fix v2 test2 as safety net fix v1.1.1 didnt install due to CPU error. Still couldnt pass the cts profile. Magiskhide Props Config also installed. Anyone can help me about this issue please? Thanks.

Hi Jayhun,

you did not wrote in detail what is your configuration, which magisk version and so on. So here are my tips:

- uninstall magisk in TWRP completely -> there ist an uninstall.zip for that
- install magisk 21.4

- Hide magisk by itselve -> choose another name (USB installation in developer options must be enabled)
- MagiskHide -> Google Play services / Google Play store / Google Service Framework

- clear Data & Cache "Google Play store", "Google Play services", "Google Service Framework"
- delete "/TWRP"

- install "safety net fix v1.1.1" or "safety net fix v1.0.2" perhaps the older version will work better, you have to find it out on your phone
- reboot your phone and check with magisk if its passing safetyNet

- if not: try the other version "safety net fix v1.1.1" or "safety net fix v1.0.2"
- clear Data & Cache "Google Play store", "Google Play services", "Google Service Framework"
- delete "/TWRP"
- reboot your phone and check with magisk if its passing safetyNet

- if not: install "Magiskhide Props" -> Terminal -> su -> props -> choose a valid fingerprint
- clear Data & Cache "Google Play store", "Google Play services", "Google Service Framework"
- delete "/TWRP"
- reboot your phone and check with magisk if its passing safetyNet

check if you have a file named "magisk_patched.img"
if you have installed magisk manually while flashing a patched boot image -> delete the file

Good luck

 

[Jayhun]

Hi Katerpanne,

First of all thanks for the help. Here is a list what I did after your post;



- uninstall magisk in TWRP completely -> there ist an uninstall.zip for that ---- DONE
- install magisk 21.4 ---- DONE
-install Magisk Manager 8.0.7

- Hide magisk by itselve -> choose another name (USB installation in developer options must be enabled) ---- DONE
- MagiskHide -> Google Play services / Google Play store / Google Service Framework ---- DONE

- clear Data & Cache "Google Play store", "Google Play services", "Google Service Framework" ---- DONE
- delete "/TWRP" ---- Couldnt uninstall TRWP and in their website it says "For the vast majority of devices, you don't actually remove TWRP to get back to the stock recovery. Installing a different recovery is your only real option. "

- install "safety net fix v1.1.1" or "safety net fix v1.0.2" perhaps the older version will work better, you have to find it out on your phone --- I installed safetynet-fix-v2.0.0.test2.zip as v1.1.1 gives Unsupported CPU architecture: armeabi-v7a error.
- reboot your phone and check with magisk if its passing safetyNet --- Attestation Failed / BasicIntegrity Passed / ctsProfile Failed / evalType Basic

- if not: try the other version "safety net fix v1.1.1" or "safety net fix v1.0.2" ---- I installed safetynet-fix-v2.0.0.test2.zip as v1.1.1 gives Unsupported CPU architecture: armeabi-v7a error.
- clear Data & Cache "Google Play store", "Google Play services", "Google Service Framework" --- DONE
- delete "/TWRP" ---- Couldnt uninstall TRWP
- reboot your phone and check with magisk if its passing safetyNet --- Attestation Failed / BasicIntegrity Passed / ctsProfile Failed / evalType Basic

- if not: install "Magiskhide Props" -> Terminal -> su -> props -> choose a valid fingerprint --- Chosen Xiaomi Redmi Note 2 Global (5.0.2) fingerprint
- clear Data & Cache "Google Play store", "Google Play services", "Google Service Framework" --- DONE
- delete "/TWRP" ---- Couldnt uninstall TRWP
- reboot your phone and check with magisk if its passing safetyNet -- Attestation Failed / BasicIntegrity Passed / ctsProfile Failed / evalType Basic

check if you have a file named "magisk_patched.img" -- I do not have magisk_patched.img
if you have installed magisk manually while flashing a patched boot image -> delete the file --- DONE

As an extra step I changed the fingerprint boot stage to post-fs-data as MagiskHideProps Config page suggests. clear Data & Cache "Google Play store", "Google Play services", "Google Service Framework". And the result is still failed.

Attestation Failed
BasicIntegrity Passed
ctsProfile Failed
evalType Basic


My device : XiaomiRedmi S2
MIUI version : MIUI Global 12.0.2 Stable 12.0.2.0 (PEFMIXM)
Android version : 9 PKQ1.181203.001
Android security patch level : 2020-09-01


What else should I try? thanks for the all help.

 

[Poney70]

What else should I try? thanks for the all help.

Hello!

Your device/ROM is using 32-bit CPU architecture. That's why the currently available "safetynet-fix" versions (<2.0.0) by @kdrag0n can't work (64-bit CPU architecture support only)...

About safetynet-fix-v2.0.0 (test version) => MIUI is not compatible for now.

But @wulan17 added 32-bit CPU architucture support for Android 9 / 10 / 11.

So try this new version => safetynet-fix-v1.1.2.zip (mirror link: here)

Source: https://github.com/wulan17/safetynet-fix



EDIT: Also, you normally don't need "MagiskHide Props Config" module and so you can uninstall it.

 

[Jayhun]

Hello!

Your device/ROM is using 32-bit CPU architecture. That's why the currently available "safetynet-fix" versions (<2.0.0) by @kdrag0n can't work (64-bit CPU architecture support only)...

About safetynet-fix-v2.0.0 (test version) => MIUI is not compatible for now.

But @wulan17 added 32-bit CPU architucture support for Android 9 / 10 / 11.

So try this new version => safetynet-fix-v1.1.2.zip (mirror link: here)

Source: https://github.com/wulan17/safetynet-fix



EDIT: Also, you normally don't need "MagiskHide Props Config" module and so you can uninstall it.

Thanks a lot. It worked. Wow, thanks again.

 

[mnemoc]

So try this new version => safetynet-fix-v1.1.2.zip (mirror link: here)

Source: https://github.com/wulan17/safetynet-fix

hi, where does this 1.1.2 come from? I can't see such release on @wulan17 github

 

[Poney70]

hi, where does this 1.1.2 come from? I can't see such release on @wulan17 github

Hello, I created it myself from @wulan17's changes.

EDIT: I could have named it "safetynet-fix-v1.1.1-wulan17.zip", yes.

 

[Montblanc0]

Unfortunately it doesn't seem to be doing anything on my lavender on MIUI 10 (Android 9). I can see that the module has succesfully loaded, the keystore and props are set but I still fail CTS profile. I'm on a stock rom for RN7 and changing fingerprint with Props Config doesn't do the trick. Do I have any options?

EDIT: Crossposting my solution from the xda thread:

After 2 days spent troubleshooting this issue, I've finally realized that the culprit is a MAGISK MODULE that changes the DNS servers. I can easily reproduce the cts fail by reactivating the module. You can try yourself with the Cloudflare DNS module from the magisk repo. I was using an older Google DNS module and I also tried the Cloudflare one, but both DNS changes were detected by SafetyNet. Since I'm stuck on Magisk 19.3, I don't know if current stable or canary already have DNS change obfuscations, so this problem might have happened to me and me alone and you have no reason to worry. But if you're on Magisk v22 or canary and SafetyNet fix doesn't work for you, then check if you have any DNS modules active and deactivate or uninstall them. If CTS profile is now green, it means SafetyNet added some more checks for the cts profile that now include our DNS configs.

 

[rxaviers]

after install / reboot: clear Data / Cache "Google Play store", "Google Play services", "Google Service Framework" - reboot

This was key for me. GPay was showing my card as "not set up" and "Contactless set up" was showing that my phone didn't meet security requirements, although SafetyNet was passing successfully. Needed to go to Settings > Apps > Manage apps > Search "Google" and click the "Show all" (including system services) link to see all three mentioned above, then "Clear all data" for all, except for "Google Play services" which I cleared cache only.

 

[mazim]

Work great on the Mi 9T Pro, xiaomi.eu 12.0.6. All banking apps and Google Pay are working correctly.

 

[FloconLC]

You also need to "clear all data" of these following apps:

- Google Play store
- Google Play services
- Google Service Framework

Then reboot your device.

If Google Pay still not working, "clear all data" of this app too.

Hi, I installed magisk 22 on my mi9t miui 12.0.6 xiaomi eu.

Now the safetynet is in green everything is ok (safetynet fix), but is it normal that in google play store>parameter>play protect "the device is not certified"?

For example I can't find Netflix I have to install it manually, can we certify the device?

 

[pablo75rus]

Hello, you don't need to use "MagiskHide Props Config" if your ROM is correctly made.

Only install the latest "safetynet-fix" Magisk module in Magisk Manager => safetynet-fix-v1.1.1.zip

Thanks to Budda I've found your solution after just 3 ROM flashes, not 100 Cheers mate!

 

[DamonSalvatore07]

Hi, I installed magisk 22 on my mi9t miui 12.0.6 xiaomi eu.

Now the safetynet is in green everything is ok (safetynet fix), but is it normal that in google play store>parameter>play protect "the device is not certified"?

For example I can't find Netflix I have to install it manually, can we certify the device?

Clear data for Google Play Store , Hide root from it and reboot


Sent from my Mi 9T Pro using Tapatalk

 

[DamonSalvatore07]

Alright , here we go again .

Steps to follow :
1. Open Magisk and select modules tab
2. Install Module for Android 11 - (https://t.me/XiaomiEUCloud/156)
For Android 10 - (https://t.me/XiaomiEUCloud/158) from Storage
3. Reboot your Device
Done .

UPDATE : NO NEED TO FLASH THIS ON 12.1.14 AND LATER BETA BUILDS AS THE FIX HAS BEEN IMPLEMENTED ALREADY .

Credits - Admin 47 from https://t.me/XiaomiEUK20Pro
View attachment 34067


Sent from my Mi 9T Pro using Tapatalk

NEW POST : https://r.tapatalk.com/shareLink/to...&share_fid=73822&share_type=t&link_source=app

UPDATE ON MAGISK AND SAFETYNET

Sent from my Mi 9T Pro using Tapatalk