Approov
No search results...
F3: search down. SHIFT+F3: search up
(Latest: v2.6)
v2.6 v2.4 v2.3 v2.2 v2.1 v2.0 v1.12

  • Release Notes
    • Version 2.5
    • Version 2.4
    • Version 2.3
    • Version 2.2
    • Version 2.1
    • Version 2.0
    • Version 1.12
    • Version 1.11
    • Version 1.10
    • Version 1.9
    • Version 1.8
    • Version 1.7
    • Version 1.6
    • Version 1.5
    • Version 1.4
    • Version 1.2
    • Version 1.0
  • Installation
    • Setup
      • Requirements
      • Approov Tool
      • Installation on Linux
      • Installation on MacOS
      • Installation on Windows
      • Android Bundletool Installation
  • User Manual
    • Getting Started With Approov
    • Approov Architecture
      • Key Components
      • Security Rules Updates
      • Cloud Server Redundancy
    • SDK Integration
      • Getting the Approov SDK
      • Importing the Approov SDK into Android Studio
      • Importing the Approov SDK into iOS Xcode
        • Logging
        • Architectures
    • SDK Configuration
      • How SDK Configuration Works
      • Getting the Initial SDK Configuration
      • Handling Multiple Accounts
    • SDK Initialization
      • Reading Initial SDK Configuration
      • Reading Dynamic SDK Configuration
      • Starting the SDK
      • Writing Dynamic SDK Configuration
      • Reinitializing the SDK
    • Managing API Domains
      • Overview
      • Adding API Domains
      • Listing API Domains
      • Removing API Domains
      • Adding Demonstration Shapes API
    • Fetching Approov Tokens
      • Token Fetch Errors
      • Synchronous Token Fetching
      • Asynchronous Token Fetching
      • Token Fetch Latency
    • Managing Registrations
      • Android App Signing Certificates
      • Registering an App
      • Registration Upgrade Messages
      • Temporary Registrations
      • Listing Registrations
      • Removing Registrations
      • Removing Multiple Registrations
      • Annotating a Registration
      • Special Library Registration
      • Registration Cloning
    • Approov Tokens
      • Token Format
      • Token Signing
      • Token Lifespan
      • Token Claims
      • Attestation Response Code
      • Getting an Attestation Response Code
      • Obtaining Additional Token Information
      • Reporting Token Misuse
      • Checking Token Validity
      • Loggable Tokens
      • Long Lived Approov Tokens
      • IP Tracking Policy
    • Backend Integration
      • Requirements
      • Token Secret Extraction
      • Generating Example Tokens
      • Changing the Token Secret
      • Raw Token Secret
    • Public Key Pinning Configuration
      • Background
      • Static Pinning Issues
      • Approov Dynamic Pinning
      • Managing Pins
      • Pinning For New API Domains
      • Managing Domain Pins
      • Leaf Public Key Pin Extraction
      • Intermediate Public Key Pin Extraction
      • Certificate File Pin Extraction
      • Certificate Pins From a Device
      • Forcing Pin Application
      • Checking API Configuration
      • Getting All API Configuration
      • Setting All API Configuration
    • Public Key Pinning Implementation
      • Setting Pins
      • Reacting to Configuration Changes
      • Reacting to Force Apply Pins
      • Testing the Pinning Implementation
      • Continuous Pinning Testing
    • Security Policies
      • What is a Security Policy
      • Getting Current Security Policy
      • Changing Security Policy
      • Device Properties
      • Rejection Policies
      • Annotation Policies
      • Key IDs
    • Managing Devices
      • Extracting the Device ID
      • Device ID Stability
      • Adding a Device Security Policy
      • Setting Pinning Mode
      • Listing Your Devices
      • Removing Devices
      • Banning a Device
      • Removing a Device Ban
      • Getting State of a Device
      • Clearing All Device State
    • Device Filters
      • Filtering Purpose
      • Getting Specific Device Information
      • Analyzing New Devices
      • Adding a Device Filter
      • Analyzing Filtered Devices
      • Regular Expression Filtering
      • Conjunction Filters
      • User Properties
      • Listing Device Filters
      • Removing a Device Filter
      • Rejecting Filtered Devices
      • Banning Filtered Devices
      • Marking Filtered Devices as Risky
      • Custom Filtered Security Policy
      • Observing All Token Fetch Devices
      • Analyzing Captured Streams
    • Token Binding
      • Token Binding Concept
      • Setting the Binding
      • Generating Example Token with Binding
      • Backend Integration Impact
    • Apple DeviceCheck Integration
      • DeviceCheck Concept
      • Setting the DeviceCheck Key
      • Permanent Device Banning
      • Removing the DeviceCheck Key
      • Automatic Device Banning
    • Google SafetyNet Integration
      • How the SafetyNet Integration Works
      • Getting a SafetyNet API Key
      • Setting the SafetyNet API Key
      • Removing the SafetyNet API Key
      • App Build Requirements
      • Signing Certificate Integrity
      • Adjusting the SafetyNet API Quota
    • Message Signing
      • Enabling Message Signing
      • Getting the Message Signing Key
      • Disabling Message Signing
      • Generating Message Signatures in the App
      • Checking Message Signatures in the Backend
    • Android Automated Launch Detection
    • Metrics Graphs
      • Grafana
      • Metrics Naming
        • Summary Metrics
        • Flag Metrics
        • App Metrics
        • SDK Metrics
        • Policy Metric
        • Filter Metrics
      • Live Metrics
      • Billing Usage
      • Hourly Metrics
      • Daily Metrics
      • Monthly Metrics
      • SDK Metrics
      • Exporting Data
    • Service Monitoring
      • Summary Emails
      • Managing Email Recipients
      • Setting Summary Frequency
      • Emergency Contact
      • Healthcheck Endpoint
    • Management Tokens
      • Best Practice
      • Types of Management Token
      • Creating New Management Tokens
      • Token Expiry Reminders
      • Listing Management Tokens
      • Revoking Management Tokens
    • Offline Security Mode
      • Use Case
      • Operational Flow
      • Backend Integration
      • Remote Hardware Integration
      • Requesting a Baseline Measurement
      • Persisting the Measurement Configuration
      • Getting a Measurement Proof
    • Migrating from Approov 1
      • Key Differences
      • Performing the Transition
      • Legacy Registration Tool Mode
      • Account Administration
      • SDK Usage Differences
      • Migrating Pinning
  • CLI Tool Reference
    • Overview
      • API Command
      • App Signing Certificates Command
      • Device Command
      • DeviceCheck Command
      • Filter Command
      • Management Command
      • Monitoring Command
      • Metrics Command
      • Pin Command
      • Policy Command
      • Registration Command
      • SafetyNet Command
      • SDK Command
      • Secret Command
      • Token Commands
      • Whoami Command
  • Mobile SDK Reference
    • Approov SDK Interface
      • Initialization
      • Configuration Fetching
      • Getting the Device ID
      • Pin Extraction
      • Token Fetch Interface
      • Synchronous Token Fetch
      • Asynchronous Token Fetch
      • Token Binding
      • Integrity Measurement Proof
      • Device Measurement Proof
      • Message Signing
      • Set User Property
      • Set Activity
  • Quickstart Integrations
    • Backend API
    • Frontend Mobile App

  • Approov Support

© 2001-2021 CriticalBlue Ltd.

Navigation

Release Notes

Release notes for all Approov versions

Installation

Approov installation documentation

User Manual

Step by step guide showing how Approov is used

CLI Tool Reference

Reference for administrating your Approov service

Mobile SDK Reference

Reference for the mobile SDK interface

Quickstart Integrations

Examples by mobile and backend platform.