Approov
No search results...
F3: search down. SHIFT+F3: search up
(Latest: v2.6)
v2.5 v2.4 v2.3 v2.2 v2.1 v2.0 v1.12

  • Release Notes
    • Version 2.6
    • Version 2.5
    • Version 2.4
    • Version 2.3
    • Version 2.2
    • Version 2.1
    • Version 2.0
    • Version 1.12
    • Version 1.11
    • Version 1.10
    • Version 1.9
    • Version 1.8
    • Version 1.7
    • Version 1.6
    • Version 1.5
    • Version 1.4
    • Version 1.2
    • Version 1.0
  • Trial Guide
    • How to Setup and Run a Successful Trial
      • Before you start the trial
      • Sign Up for an Approov Trial
      • Initializing the Approov CLI
      • Integrate and Deploy
      • Monitor your API traffic with Approov Metrics
      • Test your platform
      • Advanced Features
  • Installation
    • Setup
      • Requirements
      • Initializing the Approov CLI
      • Installation on Linux
      • Installation on MacOS
      • Installation on Windows
      • Android Bundletool Installation
  • User Manual
    • Getting Started With Approov
      • Account Access Roles
      • Passwords
      • Account Access Recovery
      • Migrating to Account Access Roles
    • Approov Architecture
      • Key Components
      • Detection Capabilities
      • Security Rules Updates
      • Cloud Server Redundancy
    • Android SDK Integration
      • Getting the Android SDK
      • Importing the SDK into Android Studio
      • Android Obfuscation
      • Use on Emulator
    • iOS SDK Integration
      • Getting the iOS SDK as an XCFramework
      • Importing the SDK into Xcode
      • Use on Simulator
      • Getting the iOS SDK as a Framework
      • Logging
    • SDK Configuration
      • How SDK Configuration Works
      • Getting the Initial SDK Configuration
      • Handling Multiple Accounts
    • SDK Initialization
      • Reading Initial SDK Configuration
      • Reading Dynamic SDK Configuration
      • Starting the SDK
      • Writing Dynamic SDK Configuration
      • Reinitializing the SDK
    • Managing API Domains
      • Overview
      • Adding API Domains
      • Keyset Key API Addition
      • Adding Pin Only API Domains
      • Listing API Domains
      • Removing API Domains
      • Adding Demonstration Shapes API
    • Fetching Approov Tokens
      • Token Fetch Errors
      • Synchronous Token Fetching
      • Asynchronous Token Fetching
      • Token Fetch Latency
    • Managing Registrations
      • Android App Signing Certificates
      • Registering an App
      • Registration Upgrade Messages
      • Temporary Registrations
      • Unversioned Registrations
      • Listing Registrations
      • Removing Registrations
      • Removing Multiple Registrations
      • Annotating a Registration
      • Special Library Registration
      • Registration Cloning
    • Approov Tokens
      • Token Format
      • JWS Token Signing
      • JWE Token Encryption
      • Token Lifespan
      • Token Claims
      • Attestation Response Code
      • Getting an Attestation Response Code
      • Obtaining Additional Token Information
      • Reporting Token Misuse
      • Checking Token Validity
      • Loggable Tokens
      • Long Lived Approov Tokens
      • IP Tracking Policy
      • Audience Inclusion
      • Issuer Inclusion
    • Backend Integration
      • Requirements
      • Account Secret Key Export
      • Account Secret Key JWK Export
      • Generating Example Tokens
      • Changing the Account Secret Key
      • Raw Account Secret Key
    • Public Key Pinning Configuration
      • Background
      • Static Pinning Issues
      • Approov Dynamic Pinning
      • Managing Pins
      • Pinning For New API Domains
      • Managing Domain Pins
      • Leaf Public Key Pin Extraction
      • Intermediate Public Key Pin Extraction
      • Certificate File Pin Extraction
      • Certificate Pins From a Device
      • Forcing Pin Application
      • Checking API Configuration
      • Getting All API Configuration
      • Setting All API Configuration
    • Public Key Pinning Implementation
      • Setting Pins
      • Reacting to Configuration Changes
      • Reacting to Force Apply Pins
      • Testing the Pinning Implementation
      • Continuous Pinning Testing
    • Security Policies
      • What is a Security Policy
      • Getting Current Security Policy
      • Changing Security Policy
      • Rejection Policies
      • Custom Rejection Policies
      • Annotation Policies
      • Key IDs
    • Managing Devices
      • Extracting the Device ID
      • Device ID Stability
      • Adding a Device Security Policy
      • Labelling a Device
      • Setting Pinning Mode
      • Listing Your Devices
      • Removing Devices
      • Removing Multiple Devices
      • Banning a Device
      • Removing a Device Ban
      • Getting State of a Device
      • Clearing All Device State
    • Device Filters
      • Filtering Purpose
      • Getting Specific Device Information
      • Analyzing New Devices
      • Adding a Device Filter
      • Analyzing Filtered Devices
      • Regular Expression Filtering
      • Conjunction Filters
      • User Properties
      • Listing Device Filters
      • Removing a Device Filter
      • Rejecting Filtered Devices
      • Banning Filtered Devices
      • Marking Filtered Devices as Risky
      • Custom Filtered Security Policy
      • Observing All Token Fetch Devices
      • Analyzing Captured Streams
    • Token Binding
      • Token Binding Concept
      • Setting the Binding
      • Generating Example Token with Binding
      • Backend Integration Impact
    • Apple DeviceCheck Integration
      • DeviceCheck Concept
      • Setting the DeviceCheck Key
      • Permanent Device Banning
      • Removing the DeviceCheck Key
      • Automatic Device Banning
    • Google SafetyNet Integration
      • How the SafetyNet Integration Works
      • Getting a SafetyNet API Key
      • Setting the SafetyNet API Key
      • Removing the SafetyNet API Key
      • App Build Requirements
      • Signing Certificate Integrity
      • Adjusting the SafetyNet API Quota
    • Managing Key Sets
      • Adding a New Key
      • Listing Keys
      • Removing Keys
      • Getting Public Key PEM
      • Getting Keyset JWKS
      • Importing Keys
    • Message Signing
      • Enabling Message Signing
      • Getting the Message Signing Key
      • Disabling Message Signing
      • Generating Message Signatures in the App
      • Checking Message Signatures in the Backend
    • Android Automated Launch Detection
    • Metrics Graphs
      • Grafana
      • Metrics Naming
        • Summary Metrics
        • Flag Metrics
        • App Metrics
        • SDK Metrics
        • Policy Metric
        • Filter Metrics
      • Live Metrics
      • Billing Usage
      • Hourly Metrics
      • Daily Metrics
      • Monthly Metrics
      • SDK Metrics
      • Exporting Data
    • Service Monitoring
      • Summary Emails
      • API Monitoring
      • Managing Email Recipients
      • Setting Summary Frequency
      • Emergency Contact
      • Healthcheck Endpoint
    • User Management
      • Best Practice
      • User Roles
        • Admin Role
        • Delegate Role
        • Automation Role
      • Adding New User Roles
      • Access Expiry Reminders
      • Listing User Roles
      • Revoking User Access
    • Automated Approov CLI Usage
      • Creating an Automation Management Token
      • Automation Setup on Linux
      • Automation Setup on MacOS
      • Automation Setup on Windows
      • Retrieving an Existing Automation Management Token
    • Offline Security Mode
      • Use Case
      • Operational Flow
      • Backend Integration
      • Remote Hardware Integration
      • Requesting a Baseline Measurement
      • Persisting the Measurement Configuration
      • Getting a Measurement Proof
  • CLI Tool Reference
    • Overview
      • API Command
      • App Signing Certificates Command
      • Device Command
      • DeviceCheck Command
      • Filter Command
      • Init Command
      • Keyset Command
      • Monitoring Command
      • Metrics Command
      • Password Command
      • Pin Command
      • Policy Command
      • Registration Command
      • Role Command
      • SafetyNet Command
      • SDK Command
      • Secret Command
      • Token Commands
      • Users Command
      • Whoami Command
  • Mobile SDK Reference
    • Approov SDK Interface
      • Initialization
      • Configuration Fetching
      • Getting the Device ID
      • Pin Extraction
      • Token Fetch Interface
      • Synchronous Token Fetch
      • Asynchronous Token Fetch
      • Token Binding
      • Integrity Measurement Proof
      • Device Measurement Proof
      • Message Signing
      • Set User Property
      • Set Activity
  • Quickstart Integrations
    • Frontend Mobile App
    • Backend API

  • Approov Support

© 2001-2021 CriticalBlue Ltd.

Navigation

Release Notes

Release notes for all Approov versions

Trial Guide

How to Setup and Run a Successful Trial

Installation

Approov installation documentation

User Manual

Step by step guide showing how Approov is used

CLI Tool Reference

Reference for administrating your Approov service

Mobile SDK Reference

Reference for the mobile SDK interface

Quickstart Integrations

Examples by mobile and backend platform.