What Rom, please complete 12.5.1.0 RKBCNXM or 12.5.2.0 RKBCNXM.??? What you mean with magisk and prop tweak ????
Thank`s for your answer!!
Both 12.5.1.0 RKBCNXM and 12.5.2.0 RKBCNXM are beta stable. And Xiaomi didn't bother to register with Google beta stable (some reports show that this is not the case with 12.5.3 beta stable which is yet to come to MI 11). Hence either 12.5.1.0 RKBCNXM or 12.5.2.0 RKBCNXM don't pass safetynet test, don't support Google Pay and Google play shows device as unregistered.
Therefore, in order to have Google Pay, Widevine or any other app which demands Google certification you must magisk root the device. Since we don't have TWRP for MI 11 yet, you have to install Magisk 22.1 apk, on computer extract whatever system you want to implement (12.5.1.0 RKBCNXM or 12.5.2.0 RKBCNXM stable beta), copy boot.img from extracted rom to the phone and patch it with Magisk.
Launch the Magisk Manager app on the device.
Tap on the Install button situated next to Magisk, choose Select and Patch a file.
Browse to the extracted boot.img file and select it, then tap on the Let’s Go option.
Magisk will now load the boot.img file and will patch it accordingly.
Once that is done, you would get the Download Complete message.
The name of the patched file will be magisk_patched.img.
Copy it to the computer on which you have installed Platform Tools.
On the phone activate USB Debugging (under Developer Options.
On the computer open Terminal and execute:
adb devices
(you'll get request to enable computer which you shall grant and then you must see the phone code)
adb reboot bootloader
fastboot devices
(you must see the same code as before)
fastboot flash boot_a magisk_patched.img
fastboot flash boot_b magisk_patched.img
fastboot reboot
And you're done flashing. You have now rooted phone.
But Safetynet still doesn't pass. That's because Xiaomi didn't certify it as I said before. Hence you must do the final step in order to gain privilege to use certified apps. You'll achieve it with the following procedure:
In Magisk manager enable magiskhide
Hide all secure apps
in Magisk Modules download Busybox for Android NDK and then download Magiskhide Props Config
Reboot
From Fdroid download and install Termux (and hide it in Magisk manager)
In Termux execute:
su
props
1 (edit device fingerprint)
f (pick a certified fingerprint)
(select your phone)
( accept and reboot).
After rebooting clean the cache of Google Framework Services, Google Play Services and Google Play.
In Magisk manager hide all installed secure apps.
Now Safetynet passes and all secure apps dependent on Safetynet work.
You'll enjoy all benefits of stable (beta): a decent battery, no fingerprint lags and no false touches.
But unfortunately more sophisticated (EU) bank and government secure apps which use their own method to check rooted phone still fail.