[Android Q&A, Help & Troubleshooting] DaMatteo:
MAGISK SafetyNet Issue (ctsProfile & basicintegrity) & MagiskHide apps deselecting

Hi all,

Long story short, I'm getting the errors within Magisk Manager SafetyNet Test: ctsProfile: false & basicintegrity: false

And the following error in the Google Play version of SafetyNet Test: "Response Signature Validation - Fail (Response payload validation failed)"

I'm also unable to keep items ticked within "Magisk Hide"

I've searched online and on the forums but not found a solution to my issue.

It's worth mentioning that I'm new at this, it is my first time rooting a device. All appeared to go well until the SafetyNet checks within Magisk and also SafetyNet Test from Google Play.

More detailed information below:

Device Details:

Not sure how many of these needed - but too much info is better than not enough!

Samsung Galaxy Note 4

Model Number: SM-N910F

Android Version 6.0.1

Security Version: Aug-2017

Baseband Version: N910FXXU1DQL1

Kernel Version: 3.10.40-10100220

Build Number: MMB29M.N910FXXU1DQL2

Device Carrier: THREE (I am based within the UK)

What I've done so far:

Attempt 1: SuperSU to Magisk

I previously flashed SuperSU onto my device a while back via Odin3 and then discovered that Magisk was required instead to play Pokémon Go with Root.

I uninstalled SuperSU using the option with the app

I then Flashed Magisk through TWRP and attempted SafetyNet check, it showed 2 errors (ctsProfile: false & basicintegrity: false)

I tried messing about with stuff but got absolutely nowhere, gave up and uninstalled Magisk through Magisk Manager.

Flashed Stock Android ROM onto my device via Odin3.

Factory Reset my device and cleared Cache (Wanted a clean slate)

Attempt 2: Magisk

Downloaded SafetyNet Test from Google Play, ran it and got the green tick - no errors

Downloaded RootBeer Sample, ran it and again no issues (Device shows as not rooted)

Flashed TWRP onto my device using Odin3 (I have to do this every time I reboot if I want to access TWRP - not sure if that's normal)

Created a Backup in TWRP

Installed/Flashed Magisk v16.0 through TWRP

Rebooted Device

Ran the SafetyNet Test App again and got the following error: "Response Signature Validation - Fail (Response payload validation failed)"

Ran RootChecker - Shows I am Rooted, Ran RootBeer Sample and got following Red Crosses: BUSYBOX BINARY / SU BINARY / SU EXISTS / RW PATHS / ROOT NATIVE

Within Magisk Manager I attempted SafetyNet Check and got the 2 following Errors (again - same as Attempt 1): (ctsProfile: false & basicintegrity: false)

It's also worth mentioning that when I attempt to go into Magisk Hide and select Google Play Store, Google Play Services & Pokémon Go, it allows me to tick them, but when I back out of the screen and go back in... They're all unticked again - this applies for everything I attempt to select.

Any help that anyone can provide would be hugely appreciated - Please use simple terms in responses if possible as like I say, I'm a noob at this but desperately wanting to learn how to do this and how to resolve issues like these. If there's any logs that are required, please point me in the direction of how to obtain said logs

Thank you in advance