Ro.boot.vbmeta.digest -

$ getprop ro.boot.vbmeta.digest
a1b2c3d4e5f678901234567890abcdef1234567890abcdef1234567890abcdef

(Length depends on the hash algorithm – typically 64 hex chars for SHA256.)

Google’s Play Integrity API evaluates ro.boot.vbmeta.digest (alongside ro.boot.verifiedbootstate) to determine if the device is running a valid, unmodified Android build. A locked bootloader must present the OEM’s signed digest; an unlocked bootloader typically changes the state or the digest itself. ro.boot.vbmeta.digest

ro.boot.vbmeta.digest is a critical piece of Android’s verified boot chain, providing a tamper-evident fingerprint of the boot configuration. It enables strong remote attestation and hardware-backed key binding, forming the foundation of Android’s modern security model. $ getprop ro

---

---