Forum Discussion

Menardo_134653's avatar
Menardo_134653
Icon for Nimbostratus rankNimbostratus
Nov 16, 2013

Rooting an Android device with an Edge Client Installed

Hi,

 

I just like to know if anyone here have encountered this before. I installed an Edge Client in a non-rooted Android device and installed a client certificate in to it. After that I rooted the device and tried to access the app. It prompted me if I want to uninstall the app so I click cancel. The app remained installed and the funny thing is the client certificate also remained installed. Is there a setting in the edge client to disable that behaviour? Either the app is uninstalled without prompt or the certificate is removed when device is rooted.

 

Regards

 

BIG-IP Access Policy Manager (APM)
deployment
management
security

2 Replies

  • Michael_Koyfma1's avatar
    Michael_Koyfma1
    Icon for Cirrus rankCirrus
    Nov 16, 2013

    There is no option to do this, however, the EDGE client does report to APM if the device has been rooted, so you can easily deny/restrict access in those scenario. Check the EDGE client docs on support.f5.com to see which session variable you can check for "rooted" status

     

  • Menardo_134653's avatar
    Menardo_134653
    Icon for Nimbostratus rankNimbostratus
    Nov 17, 2013

    Hi Michael,

     

    Appreciate your input. I found a way to detect rooted devices through APM. Coming back to the rooted device where the certificate is left behind in the app after rooting it. Once a device is rooted, would there be a way for someone to extract the certificate out of the rooted device?

     

    Regards,