Symantec VIP Software Development Kit (SDK) V3.0.5 Release Notes

Symantec VIP Software Development Kit (SDK) v3.0.5 Release Notes

Table of Contents

VIP Software Development Kit (SDK) 3.0.5 Release Notes...... 3 Before you upgrade...... 3 How to integrate VIP SDK into your application...... 3 Updating to VIP SDK 3.0.5...... 3 Supported platforms...... 4 Package contents...... 4 Previous release notes...... 5 VIP Software Development Kit (SDK) 3.0.4 Release Notes...... 5 VIP Software Development Kit (SDK) 3.0.3 Release Notes...... 6 VIP Software Development Kit (SDK) 3.0.2 Release Notes...... 8 VIP Software Development Kit (SDK) 3.0.1 Release Notes...... 10 VIP Software Development Kit (SDK) 3.0 Release Notes...... 11 Copyright statement...... 14

2 Symantec VIP Software Development Kit (SDK) v3.0.5 Release Notes

VIP Software Development Kit (SDK) 3.0.5 Release Notes

The VIP Software Development Kit (SDK) 3.0.5 release includes the following new features: • Enhanced support for Swift 5.x and Xcode 10.2 or later on the iOS platform. This release replaces ZIP with ZIPFoundation. • Support for Android 10.x • Fixed a minor issue in VIPIA-iOS (removed and renamed global variables that may cause duplicate symbol errors) For detailed information about the VIP SDK, see the VIP Software Development Kit documentation available online at the Broadcom TechDocs portal. Before you upgrade The VIP SDK 3.0.5 includes some changes you should consider before you upgrade to VIP SDK 3.0.5. • How to integrate VIP SDK into your application • Updating to VIP SDK 3.0.5 How to integrate VIP SDK into your application Before you integrate your application with VIP SDK 3.0.5, make a backup of your existing VIP SDK version. Download the latest VIP SDK from VIP Manager. Refer to the Symantec VIP Software Development Kit (SDK) Developer's Guide, online at the Broadcom TechDocs portal, for instructions on building and executing on iOS and Android.

Updating to VIP SDK 3.0.5 If you upgrade from VIP SDK 2.2 or earlier, you must first follow the upgrade procedures in the VIP Software Development Kit (SDK) 3.0 Release Notes. If you upgrade from VIP SDK 3.0 or later, complete the appropriate steps: • For Android: – Make a backup of your current VIP SDK files. – Download the latest version of the VIP SDK for Android from VIP Manager. – Replace the following files in your SDK with files from the latest version of the VIP SDK for Android: • VIPAndroid/lib/VIPAndroid-3.0.2.jar • VIPAnddroid/jniLibs/* • For iOS: – Make a backup of your current VIP SDK files. – Update to swift-protobuf version 1.8.0. – Download the latest version of the VIP SDK for iOS from VIP Manager. – Update your SDK as follows: • If you implemented device hygiene: • If your application uses Swift 5.0 or later, or uses Xcode 10.2 or later, replace the files in VIPiOS/VIPiOSDH/ Swift_5.x with the files in the same directory of the latest version of the VIP SDK for iOS. • Using the Carthage dependency manager (https://github.com/Carthage/Carthage), obtain the following frameworks: • SwiftProtobuf.framework version 1.8.0 (https://github.com/apple/swift-protobuf) • ZIPFoundation.framework version 0.9 (https://github.com/weichsel/ZIPFoundation). Place these framework files in the VIPSampleApp folder.

3 Symantec VIP Software Development Kit (SDK) v3.0.5 Release Notes

You can remove the VIPiOS framework dependency in your current build, as this is no longer required. • If you did not implement device hygiene, replace VIPiOS.Framework with the framework in the latest version of the VIP SDK for iOS.

Supported platforms VIP SDK 3.0.5 has been qualified on the following platforms: • iOS 10, 11, 12, and 13 • Android 5, 6, 7, 8, 9, and 10 Package contents The VIP Software Development Kit is available for download from VIP Manager under Account > Download Files > VIP_SDK. This VIP SDK package has zip files for the supported platforms. The following table lists the download components specific to the supported platforms. NOTE

Only VIPiOS.zip, VIPIA-iOS, and VIPAndroid.zip have been updated for this release.

Table 1: Package contents of VIP SDK

Package content Description

VIPServer.zip Contains a sample application (VIPServer) to test the integration of your mobile application with VIP Services. iOS

VIPiOS.zip Contains the SDK library, API reference documents, and sample programs.

VIPIA-iOS.zip Contains the SDK library and sample program to perform Risk- Based authentication (Intelligent Authentication). Android

VIPAndroid.zip Contains the SDK library and sample program. VIPIA-Android.zip Contains the SDK library and sample program to perform Risk- Based authentication (Intelligent Authentication).

4 Symantec VIP Software Development Kit (SDK) v3.0.5 Release Notes

Previous release notes

This section provides the release notes from the most recent releases of the VIP SDK. These release notes are superseded by the current release notes, so links to the VIP SDK documentation in these release notes may not work. For the latest versions of the VIP SDK documentation, see the Broadcom TechDocs portal.

VIP Software Development Kit (SDK) 3.0.4 Release Notes What's new in this release The VIP Software Development Kit (SDK) 3.0.4 release includes the following new features: • Support for Swift 5.x and Xcode 10.2 or later on the iOS platform. • Bug fixes and improvements. For detailed information about the VIP SDK, see the VIP Software Development Kit documentation available at https:// help.symantec.com/home/vip_cdk. This documentation is also available in PDF format at https://www.symantec.com/docs/ DOC11138. Before you upgrade The VIP SDK 3.0.4 includes some changes you should consider before you upgrade to VIP SDK 3.0.4: How to integrate VIP SDK into your application: Before you integrate your application with VIP SDK 3.0.4, make a backup of your existing VIP SDK version. Download the latest VIP SDK from VIP Manager. Learn how to build and execute on iOS and Android from the following links: • Build and execute the Sample App on iOS • Build and execute the Sample App on Android Updating to VIP SDK 3.0.4 If you upgrade from VIP SDK 2.2 or earlier, you must first upgrade your VIP SDK version to 3.0. Follow the upgrade procedures in the VIP Software Deployment Kit (SDK) 3.0 Release Notes, available at https://www.symantec.com/docs/ DOC11151. If you upgrade from VIP SDK 3.0 or later, complete the following steps: • For Android: – Make a backup of your current VIP SDK files. – Download the latest version of the VIP SDK for Android from VIP Manager. – Replace the following files in your SDK with files from the latest version of the VIP SDK for Android: • VIPAndroid/lib/VIPAndroid-3.0.2.jar • VIPAnddroid/jniLibs/* • For iOS: – Make a backup of your current VIP SDK files. – Download the latest version of the VIP SDK for iOS from VIP Manager. – Replace the following files in your SDK with files from the latest version of the VIP SDK for iOS: • If you implemented device hygiene copy the files from the appropriate folder:

5 Symantec VIP Software Development Kit (SDK) v3.0.5 Release Notes

• If your application uses Swift 4.2.1 or uses Xcode10.1, copy the files from VIPiOS.VIPiOSDH/ Swift_4.2.1 • If your application uses Swift 5.0 or later, or uses Xcode10.2 or later, copy the files from VIPiOS.VIPiOSDH/ Swift_5.x • If you did not implement device hygiene, replace VIPiOS.Framework with the framework in the latest version of the VIP SDK for iOS. Supported platforms VIP SDK 3.0.4 has been qualified on the following platforms: • iOS 10, 11, 12, and 13 • Android 5, 6, 7, 8, and 9 Package contents The VIP Software Development Kit is available for download from VIP Manager under Account > Download Files > VIP_SDK. This VIP SDK package has zip files for the supported platforms. See Table 1-1 for the download components specific to the supported platforms. NOTE Only VIPiOS.zip has been updated for this release.

Table 2: Package contents of VIP SDK

Package contents Description

Resolved issues

This release also resolves an issue where the Swift project returned a Could not find module 'VIPiOSDH' for target 'x86_64-apple-iossimulator' error when run on an iOS simulator. VIP Software Development Kit (SDK) 3.0.3 Release Notes What's new in this release The VIP Software Development Kit (SDK) 3.0.3 release includes the following new features: • Support for Swift 5.1 version on the iOS platform. • Bug fixes and improvements. For detailed information about the VIP SDK, see the VIP Software Development Kit documentation for version 3.0.1, available at https://help.symantec.com/home/vip_cdk. This documentation is also available in PDF format at https:// www.symantec.com/docs/DOC11138.

6 Symantec VIP Software Development Kit (SDK) v3.0.5 Release Notes

Before you upgrade The VIP SDK 3.0.3 includes some changes you should consider before you upgrade to VIP SDK 3.0.3: How to integrate VIP SDK into your application: Before you integrate your application with VIP SDK 3.0.3, make a backup of your existing VIP SDK version. Download the latest VIP SDK from VIP Manager. Learn how to build and execute on iOS and Android from the following links: • Build and execute the Sample App on iOS • Build and execute the Sample App on Android Updating to VIP SDK 3.0.3 If you upgrade from VIP SDK 2.2 or earlier, you must first upgrade your VIP SDK version to 3.0. Follow the upgrade procedures in the VIP Software Deployment Kit (SDK) 3.0 Release Notes, available at https://www.symantec.com/docs/ DOC11151. If you upgrade from VIP SDK 3.0 or later, complete the following steps: • For Android: – Make a backup of your current VIP SDK files. – Download the latest version of the VIP SDK for Android from VIP Manager. – Replace the following files in your SDK with files from the latest version of the VIP SDK for Android: • VIPAndroid/lib/VIPAndroid-3.0.2.jar • VIPAnddroid/jniLibs/* • For iOS: – Make a backup of your current VIP SDK files. – Download the latest version of the VIP SDK for iOS from VIP Manager. – Replace the following files in your SDK with files from the latest version of the VIP SDK for iOS: • If you implemented device hygiene copy the files from the appropriate folder: • If your application uses Swift 4.2.1 or uses Xcode10.1, copy the files from VIPiOS.VIPiOSDH/ Swift_4.2.1 • If your application uses Swift 5.0 or later, or uses Xcode10.2 or Xcode 10.2.1, copy the files from VIPiOS.VIPiOSDH/Swift_5.0.1 If your application uses Swift 5.1 or later, or uses Xcode11 or Xcode 11.1 or Xcode 11.2, copy the contents of the VIPiOS.VIPiOSDH/Swift_5.1 folder to this folder. You can also remove the VIPiOS framework dependency in your current build, as this is no longer required. • If you did not implement device hygiene, replace VIPiOS.Framework with the framework in the latest version of the VIP SDK for iOS. Supported platforms VIP SDK 3.0.3 has been qualified on the following platforms: • iOS 10, 11, and 12 • Android 5, 6, 7, 8, and 9 Package contents The VIP Software Development Kit is available for download from VIP Manager under Account > Download Files > VIP_SDK. This VIP SDK package has zip files for the supported platforms. See Table 1-1 for the download components specific to the supported platforms. NOTE Only VIPiOS.zip, VIPIA-iOS.zip, and VIPAndroid.zip have been updated for this release.

7 Symantec VIP Software Development Kit (SDK) v3.0.5 Release Notes

Table 3: Package contents of VIP SDK

Package contents Description

• Support for end-to-end encryption of user transactions using the authenticateCredentials API. See the Symantec VIP SDK Mobile Application Developer's Guide at https://help.symantec.com/home/vip_cdk for details on how to enable end-to-end encryption through the VIP SDK. • Package update for iOS. The iOS API package is updated as follows: – The iOS framework files are now in sub-folders specific to the version of Swift that the VIP SDK supports. – The iOS sample apps are now in sub-folders specific to whether or not you are implementing device hygiene. • You now specify your VIP certificate location and password in a configuration file, rather than when running the VIPserver application. • Support for tamper tools detection. Tamper tools are used to reverse engineer an application or to inject malicious custom software into an application or operating system. For detailed information about the VIP SDK and for information on encrypting transactions in particular,, see the VIP Software Development Kit documentation for version 3.0.1, available at https://help.symantec.com/home/vip_cdk. This documentation is also available in PDF format at https://www.symantec.com/docs/DOC11138. Before you upgrade The VIP SDK 3.0.2 includes some changes you should consider before you upgrade to VIP SDK 3.0.2: How to integrate VIP SDK into your application: Before you integrate your application with VIP SDK 3.0.2, make a backup of your existing VIP SDK version. Download the latest VIP SDK from VIP Manager. Learn how to build and execute on iOS and Android from the following links: • Build and execute the Sample App on iOS • Build and execute the Sample App on Android Updating to VIP SDK 3.0.2 If you upgrade from VIP SDK 2.2 or earlier, you must first upgrade your VIP SDK version to 3.0. Follow the upgrade procedures in the VIP Software Deployment Kit (SDK) 3.0 Release Notes, available at https://www.symantec.com/docs/ DOC11151. If you upgrade from VIP SDK 3.0 or later, complete the following steps:

8 Symantec VIP Software Development Kit (SDK) v3.0.5 Release Notes

• For Android: – Make a backup of your current VIP SDK files. – Download the latest version of the VIP SDK for Android from VIP Manager. – Replace the following files in your SDK with files from the latest version of the VIP SDK for Android: • VIPAndroid/lib/VIPAndroid-3.0.2.jar • VIPAnddroid/jniLibs/* • For iOS: – Make a backup of your current VIP SDK files. – Download the latest version of the VIP SDK for iOS from VIP Manager. – Replace the following files in your SDK with files from the latest version of the VIP SDK for iOS: • If you implemented device hygiene copy the files from the appropriate folder: • If your application uses Swift 4.2.1 or uses Xcode10.1, copy the files from VIPiOS.VIPiOSDH/ Swift_4.2.1 • If your application uses Swift 5.0 or later, or uses Xcode10.2 or Xcode 10.2.1, copy the files from VIPiOS.VIPiOSDH/Swift_5.0.1 You can also remove the VIPiOS framework dependency in your current build, as this is no longer required. • If you did not implement device hygiene, replace VIPiOS.Framework with the framework in the latest version of the VIP SDK for iOS. Supported platforms VIP SDK 3.0.2 has been qualified on the following platforms: • iOS 10, 11, and 12 • Android 5, 6, 7, 8, and 9 Package contents The VIP Software Development Kit is available for download from VIP Manager under Account > Download Files > VIP_SDK. This VIP SDK package has zip files for the supported platforms. See Table 1-1 for the download components specific to the supported platforms. NOTE Only VIPiOS.zip, VIPIA-iOS.zip, and VIPAndroid.zip have been updated for this release.

Table 4: Package contents of VIP SDK

Package contents Description

9 Symantec VIP Software Development Kit (SDK) v3.0.5 Release Notes

VIP Software Development Kit (SDK) 3.0.1 Release Notes What's new in this release The VIP Software Development Kit (SDK) 3.0.1 release includes the following new features: • Enhanced device hygiene information. With the latest version of the VIP Software Development Kit, the device hygiene scan returns enhanced security information. The device hygiene scan now includes the following new information and abilities: – Ability to identify if root detection (Android) or jailbreak detection (iOS) is bypassed. – Ability to detect if the app is running in an emulator or if a debugger is attached to device. – The malware scan response includes a timestamp field (Android only). – The malware definitions (LiveUpdate) are now updated over https (Android only). • Package update for iOS. The iOS API package is updated as follows: – Includes the TrimFramework.sh shell script, which contains a reference script that removes x86_64 symbols before the app is uploaded to the Apple App Store. – The stapler DH frameworks are moved to outside the VIPiOSDH.framework . • Minor bug fixes. For detailed information about the VIP SDK and device hygiene scans, see the VIP Software Development Kit documentation for version 3.0.1, available at https://help.symantec.com/home/vip_cdk. This documentation is also available in PDF format at https://www.symantec.com/docs/DOC11138. Before you upgrade The VIP SDK 3.0.1 includes some changes you should consider before you upgrade to VIP SDK 3.0.1: How to integrate VIP SDK into your application: Before you integrate your application with VIP SDK 3.0.1, make a backup of your existing VIP SDK version. Download the latest VIP SDK from VIP Manager. Learn how to build and execute on iOS and Android from the following links: • Build and execute the Sample App on iOS • Build and execute the Sample App on Android Updating to VIP SDK 3.0.1 If you upgrade from VIP SDK 2.2 or earlier, you must first upgrade to VIP SDK 3.0. See the VIP Software Deployment Kit (SDK) 3.0 Release Notes, available at https://www.symantec.com/docs/DOC11151. If you upgrade from VIP SDK 3.0, see the VIP Software Development Kit documentation for version 3.0.1, available at https://help.symantec.com/home/vip_cdk. This documentation is also available in PDF format at https://www.symantec.com/docs/DOC11138. Supported platforms VIP SDK 3.0.1 has been qualified on the following platforms: • iOS 10, 11, and 12 • Android 5, 6, 7, 8, and 9 Package contents The VIP Software Development Kit is available for download from VIP Manager under Account > Download Files > VIP_SDK. This VIP SDK package has zip files for the supported platforms. See Table 1-1 for the download components specific to the supported platforms. NOTE Only VIPiOS.zip, VIPIA-iOS.zip, and VIPAndroid.zip have been updated for this release.

10 Symantec VIP Software Development Kit (SDK) v3.0.5 Release Notes

Table 5: Package contents of VIP SDK

Package contents Description

VIPServer.zip Contains a sample application (VIPServer) to test the integration of your mobile application with VIP Services. iOS VIPiOS.zip Contains the SDK library, API reference documents, and sample program. VIPIA-iOS.zip Contains the SDK library and sample program to perform Risk- Based authentication (Intelligent Authentication). Android VIPAndroid.zip Contains the SDK library and sample program. VIPIA-Android.zip Contains the SDK library and sample program to perform Risk- Based authentication (Intelligent Authentication). VIP Software Development Kit (SDK) 3.0 Release Notes What's new in this release The VIP Software Development Kit (SDK) 3.0.1 release includes the following new features: • Enhanced device hygiene information. With the latest version of the VIP Software Development Kit (SDK), the device hygiene scan returns enhanced security information. The device hygiene scan now returns information in the following categories: – Device information: Information about the user’s mobile device, including operating system type, and VIP Access version. – Network information: Information that helps identify whether the network on which the user request is made is vulnerable to (or shows evidence of) common network attack vectors and protocol breach methods. – Configuration vulnerabilities: Information that helps identify whether the device is configured securely. – Indicators of compromise: Information that indicates that the device may have been compromised. – OS vulnerabilities: Information that helps identify potential vulnerabilities in the device operating system. Optionally, the SDK can digitally sign the device hygiene scan response • The iOS version of the SDK is migrated to a .framework library. Previously, the iOS version of the SDK was released as a static library with the extension .a , plus header files. With this release, the SDK is released as a dynamic library with the extension .framework . Because of the framework changes, VIP SDK 3.0 is a mandatory release. For detailed information about the VIP SDK and about the device hygiene scan, see the Symantec VIP Credential Development Kit Application Developer's Guide available online at https://help.symantec.com/home/vip_cdk. This documentation is also available in PDF format at https://www.symantec.com/docs/DOC11138. Before you upgrade The VIP SDK 3.0.1 includes some changes you should consider before you upgrade to VIP SDK 3.0.1: How to integrate VIP SDK into your application: Before you integrate your application with VIP SDK 3.0.1, make a backup of your existing VIP SDK version. Download the latest VIP SDK from VIP Manager. Learn how to build and execute on iOS and Android from the following links: • Build and execute the Sample App on iOS • Build and execute the Sample App on Android

11 Symantec VIP Software Development Kit (SDK) v3.0.5 Release Notes

Updating framework files on iOS

Previously, the iOS version of the SDK was released as a static library with the extension .a , plus header files. With this release, the iOS version of the SDK is released as a dynamic library with the extension .framework . To use the new SDK framework, you must remove your existing .a library and header files, and replace them with the .framework library. Then, change your import statements in your application code to reference the new .framework library. For example, if you imported your application code header as #import "Vault.h" , change your import statement to #import "VIPiOS/Vault.h" . If you use VIPiOSDH.framework to enable device hygiene, make sure that Always Embed Swift Standard Libraries is set to YES in Build Settings. Supported platforms VIP SDK 3.0 has been qualified on the following platforms: • iOS 10, 11, and 12 • Android 4.4, 5, 6, 7, 8, and 9 NOTE The malware detection capabilities provided by the Device Hygiene feature is supported on Android version 5.0 and later. Package contents The VIP Software Development Kit is available for download from VIP Manager under Account > Download Files > VIP_SDK. This VIP SDK package has zip files for the supported platforms. See Table 1-1 for the download components specific to the supported platforms. NOTE Only VIPiOS.zip, VIPIA-iOS.zip, and VIPAndroid.zip have been updated for this release.

Table 6: Package contents of VIP SDK

Package contents Description

Known issues There are no known issues in this release. Revisions

12 Symantec VIP Software Development Kit (SDK) v3.0.5 Release Notes

This section provides notes about successive releases of the VIP SDK as denoted by revision number. To ensure that you have the latest version, check VIP Manager for updates.

Table 7: VIP SDK revisions

Revision history Changes VIP SDK 2.2, July 2018 • All the VIP SDK modules are updated. • Replaced the existing PCA3 G5 chained certificate with DigiCert root certificates. • Added support for obfuscation with Android ProGuard. • Updated the libVIPiOS.a library to LocalAuthentication.framework . VIP SDK 2.1.1, May 2018 Fixes failure to fetch the getIAData on select iOS devices. VIP SDK 2.1, November 2017 Included support for new features such as event-based credential support, device hygiene, enforce local authentication. The retrieveTransaction API and completeTransction API have also been updated. VIP SDK 2.0.8, May 2017 Minor bug fixes. VIP SDK 2.0.7, January 2017 • Location and READ_PHONE_STATE permissions are made optional for the applications using IA SDK. • Minor bug fixes VIP SDK 2.0.6, October 2016 Updated Authentication and Risk-based authentication libraries, removed READ_PHONE_STATE permission, fixed battery drain issue. VIP SDK 2.0.5, May 2016 Disabled the unwanted log messages on the Android SDK. VIP SDK 2.0.4, May 2016 Included the support of backward compatibility for the Android SDK version 1.5 and earlier versions. VIP SDK 2.0.3, March 2016 Enhanced the VIP SDK on the iOS platform. The enhanced migrate API resolves an issue that occurred when you upgrade from a credential version less than 2.0 to the current version. VIP SDK 2.0.2, March 2016 Enhanced the VIP SDK on the Android platform to handle the migration of SSL certificates from the SHA1 algorithm to the SHA256 algorithm. VIP SDK 2.0.1, February 2016 • Enhanced the call-back behavior of Credential Factory APIs. • Minor bug fixes. • READ_PHONE_STATE permission must be set correctly for VIP SDK to work properly. VIP SDK 2.0, October 2015 Added support for Certificate-based transaction approval in iOS and Android SDK components.

13 Symantec VIP Software Development Kit (SDK) v3.0.5 Release Notes

Broadcom, the pulse logo, Connecting everything, and Symantec are among the trademarks of Broadcom. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries. For more information, please visit www.broadcom.com. Broadcom reserves the right to make changes without further notice to any products or data herein to improve reliability, function, or design. Information furnished by Broadcom is believed to be accurate and reliable. However, Broadcom does not assume any liability arising out of the application or use of this information, nor the application or use of any product or circuit described herein, neither does it convey any license under its patent rights nor the rights of others.