Google is committed to advancing racial equity for Black communities. See how.
Added in API level 30

FileIntegrityManager

class FileIntegrityManager
kotlin.Any
   ↳ android.security.FileIntegrityManager

This class provides access to file integrity related operations.

Summary

Public methods
Boolean

Returns true if APK Verity is supported on the device.
Boolean

Returns whether the given certificate can be used to prove app's install source.

Public methods

isApkVeritySupported

Added in API level 30
fun isApkVeritySupported(): Boolean

Returns true if APK Verity is supported on the device. When supported, an APK can be installed with a fs-verity signature (if verified with trusted App Source Certificate) for continuous on-access verification.

isAppSourceCertificateTrusted

Added in API level 30
fun isAppSourceCertificateTrusted(certificate: X509Certificate): Boolean

Returns whether the given certificate can be used to prove app's install source. Always return false if the feature is not supported.

A store can use this API to decide if a signature file needs to be downloaded. Also, if a store has shipped different certificates before (e.g. with stronger and weaker key), it can also use this API to download the best signature on the running device.
Requires android.Manifest.permission#INSTALL_PACKAGES or android.Manifest.permission#REQUEST_INSTALL_PACKAGES

Parameters
certificate X509Certificate: This value cannot be null.
Return
Boolean whether the certificate is trusted in the system