Assess at-risk Play Integrity status of a device

Environment

• Knox Manage

Overview

When a device fails to pass a software integrity check through Play Integrity, the Device Details page on the Knox Manage console reports it as having a Violated status.

A Violated status can be caused by the following:

• Temporary network issues where the device hasn’t reported to the Play Integrity API
• The actual integrity of the device is compromised

Resolution

To check whether the Violated status is the result of a network issue:

1. On the Knox Manage console, go to Device.
2. Click the name of the device to view its details.
3. Click Device Command at the bottom-right of the page.
4. In the list of device commands, click Device Info Sync > Play Integrity (SafetyNet Attestation).
5. When prompted to confirm, click OK.

After a moment, refreshing the browser updates the Play Integrity status of the device. If the status is now Normal, the Violated status was the result of a network issue. If the status is still Violated, there’s a chance that the device integrity is compromised.

If you have reason to suspect that the device integrity is compromised, the recommended course of action is to factory reset and re-enroll the device.

If you have any further issues with a Play Integrity status, submit a support ticket.