|
|
|
|
|
Hello, Willin Deng, There are BTS warnings and these will be changed to alert at 2026-08-15. And, SWAN has a plan to get self MR at 2026-09. Could you please check this ticket ? Can we get a waiver from 3PL for this alert ? or can we resolve this issue ? Thank you. Sangmin Choi. |
|
|
Hello, Sangmin Choi, Regarding these warnings,3PL said that no customers have applied for this waiver yet.3PL suggests that we try applying and see the result. 3PL provide waiver request template.The template contains the following content: Have you submitted GTS/CTS reports for this fingerprint: (yes / no) **If no, please do that before submitting this waiver** So,could you provide GTS/CTS reports? Or,do we need to apply for a waiver in Android 12 first?(We also found the same warnings on Android 12.We have uploaded the MR reports on 6/16.) Thank you. Willin |
|
|
Hello, Willin Deng, Okay, I will prepare the CTS and GTS reports. And, I will give you the feedback for Android 12 after internal discussion. I will update until 6/30. Thank you. Sangmin Choi. |
|
|
Hello, Willin Deng, Eagle also needs a waiver request and CTS and GTS were uploaded already. So, please proceed a waiver request Eagle first, JunGyu Kim will ask it through this ticket. https://btracker-cns.fii-foxconn.com/vaas/view.php?id=2061 Thank you. Sangmin Choi. |
|
|
Hi Sangmin, We applied for an waiver using the S905X2 BTS & MR info for the keys issue, but Google refused. Google mentioned there is a workaround, and their response is as follows. As per the Partner Security Advisory—2025-05 (CVE-2025-48613 VBMeta Test Key) guidelines, partners must ensure that their VBMeta data structure is signed with their OEM release key and NOT an AOSP test key. Any data structures identified as being signed with AOSP test keys must be re-signed with the OEM release key. Android Security will require these changes for compliance with the 2026-03-05 SPL. A potential workaround, which has been successfully explored by at least one partner with their SoC vendor, is to modify the Android Bootloader (ABL). The ABL can be updated to report the old, exposed key to KeyMaster/KeyMint while verifying the image with a new production key. This would allow for migration from the vulnerable key without requiring a factory reset. BR. Willin |
|
|
Hello, Willin Deng, I just changed the BOARD_AVB_VBMETA_SYSTEM_KEY_PATH which I generated. project device/synaptics/sequoia/ diff --git a/BoardConfig.29.mk b/BoardConfig.29.mk index 7519044..afc6dfb 100644 --- a/BoardConfig.29.mk +++ b/BoardConfig.29.mk @@ -28,7 +28,7 @@ BOARD_KERNEL_CMDLINE += androidboot.boot_devices=soc/f7aa0000.sdhci BOARD_AVB_ROLLBACK_INDEX := $(VENDOR_SECURITY_PATCH_TIMESTAMP) # Enable chain partition for system. BOARD_AVB_VBMETA_SYSTEM := system -BOARD_AVB_VBMETA_SYSTEM_KEY_PATH := external/avb/test/data/testkey_rsa4096.pem +BOARD_AVB_VBMETA_SYSTEM_KEY_PATH := vendor/foxconn/security/avb/vbmeta_system_prod_key.pem BOARD_AVB_VBMETA_SYSTEM_ALGORITHM := SHA256_RSA4096 BOARD_AVB_VBMETA_SYSTEM_ROLLBACK_INDEX := $(PLATFORM_SECURITY_PATCH_TIMESTAMP) BOARD_AVB_VBMETA_SYSTEM_ROLLBACK_INDEX_LOCATION := 1 And, I can upgrade the firmware from previous firmware. Could you please upload this BTS image and check there is any warning or not ? http://altserver01.iptime.org/swan/release/20260702_19.561.1023_BTS_warning/SKB~BFX_UA300~BFX-UA300~10~QT~19.561.1023-20260702~user~release-keys.zip Thank you. Sangmin Choi. |
|
|
Hi Sangmin, Based on the scan results, the warning information has decreased from 2 to 1 (vbmeta_system ok). The warning of "vbmeta signed with VBMeta test key" still. BR. Willin Screenshot from 2026-07-03 17-31-32.png (156,254 bytes) Screenshot from 2026-07-03 17-31-17.png (161,791 bytes) |
|
|
Hello, Willin Deng, Could you please upload this BTS image and check there is any warning or not ? http://altserver01.iptime.org/swan/release/20260724_19.561.1036_BTS_user/SKB~BFX_UA300~BFX-UA300~10~QT~19.561.1036-20260723~user~release-keys.zip Thank you. Sangmin Choi. |
|
|
Hi Sanming, the fingerprint (SKB~BFX_UA300~BFX-UA300~10~QT~19.561.1036-20260723~User~release-keys.zip) does not contain any warnings . BR. Willin image.png (158,988 bytes) |
|
|
Hello, Willin Deng, Got it, thank you for support! Best Regards, Sangmin Choi. |
- yk.jung ( (ALTech) Younkwang Jung ) developer
.png)
