Banking photo TAN app not working

[Mike-source-code]

The following app from Comdirect doesn't start, complaining that the device is rooted: https://play.google.com/store/apps/details?id=com.comdirect.phototan

You don't need an account to get to that error message. It is shown directly on start.

[Mike-source-code]

I tried the following suggested fix through Magisk app with no luck unfortunately:

1. Magisk Settings (top right in the app)
2. "Enforce DenyList" switched to on
3. Open "Configure DenyList" an added banking app
4. Rebooted phone

App still complains that the phone is rooted

[Mike-source-code]

The play integrity testing app came back with a failed device verdict. On their git I found the following https://github.com/osm0sis/PlayIntegrityFork?tab=readme-ov-file#failing-device-verdict-on-custom-rom: Failing DEVICE verdict (on custom ROM)​

• Check the ROM signing keys with command adb shell unzip -l /system/etc/security/otacerts.zip or unzip -l /system/etc/security/otacerts.zip
• If the output shows the ROM is signed with the AOSP testkey then inform your ROM maintainer to start signing their builds with a private key for their next build and ideally also provide a ROM signature migration build to allow you to update to it without requiring a data wipe
• You may also try a different custom ROM, or go back to the stock ROM for your device, if available/possible

Here is my output:

adb shell unzip -l /system/etc/security/otacerts.zip
Archive:  /system/etc/security/otacerts.zip
  Length      Date    Time    Name
---------  ---------- -----   ----
     1675  2008-01-01 00:00   testkey.x509.pem
---------                     -------
     1675                     1 file

Do you think you can do a build with a private key?

[Mike-source-code]

Installing Shamiko magisk module fixed the issue: https://github.com/LSPosed/LSPosed.github.io

Note: Deactivate "enforced DenyList" in the magisk settings, but still add the banking app to the DenyList as stated in the module's readme.