com.android.rkpdapp Copy

This is the Remote Key Provisioning Daemon (RKPD), labelled "RemoteProvisioner" on many devices. It is a core Android security component that fetches short-lived attestation certificates from Google's backend so that Keystore can sign hardware key-attestation requests. Remote Key Provisioning replaces the older model of burning attestation private keys into devices in the factory: each device holds a factory-registered keypair, periodically requests fresh certificates, and rotates them as they expire. In our sample it is signed by the device platform key on each build (Samsung, Motorola, Xiaomi, Fairphone, Zebra, Nothing and others), which is consistent with it being an AOSP/platform component rather than a downloadable app. There is a clear version dimension. Remote Key Provisioning has been part of AOSP since Android 12 and was mandated for new devices from Android 13. From Android 14 it is delivered as an updatable Mainline module, packaged with the system-server component into the com.android.rkpd APEX, so its role and packaging differ across releases. For Android Enterprise, EMM and kiosk fleets this is security infrastructure, not a user feature. It underpins hardware-backed key attestation, which apps and services that verify device integrity or use hardware-backed keys depend on. Disabling or removing it can break attestation and cause those apps or checks to fail, so it should not be disabled.

• Remote Key Provisioning | Android Open Source Project →
• Upgrading Android Attestation: Remote Provisioning - Android Developers Blog →
• Package signer provenance for com.android.rkpdapp - Android System App Database →

• Re-signed by each device maker with its own platform key - 15 different certificates appear across 10 device makers in our sample. That is the signature of a stock AOSP/system package every OEM builds and signs itself, not a single maker's or a third party's preinstall.
• Its largest observed manifest declares 9 permissions: 1 signature or system-level, 6 install-time and 2 vendor or uncatalogued.
• Never reported as user-facing, so it runs as a background or system component rather than an app the user opens.