Enter app feature information-ICP Filing(Filing Service)-阿里云帮助中心

When you apply for the Alibaba Cloud App Filing Service, you are required to provide feature information for your app. This topic describes how to obtain this information for apps on the Android and iOS platforms.

Note

This section contains technical information intended for app developers and is provided for reference only. The method for obtaining information varies depending on how the application is packaged and published. For specific details, consult your app developer.

Basic concepts

Concept	Description
Package name (Android application identifier)	The APK package name is the unique identifier for an Android application. For example: com.alibaba.aliyun.
Bundle ID (iOS application identifier)	The Bundle ID is the unique identifier for an iOS application. For example: com.aliyun.beian.app.
Digital certificate	A digital certificate is a file that contains a public key and information about the key's owner. A trusted authority digitally signs and issues the certificate, which serves as a trusted credential.
Digital signature	A digital signature is created using an asymmetric key algorithm, which generates a key pair: a private key and a public key. The sender uses the private key to sign a digest. The receiver must use the corresponding public key to verify the signature.
Digital digest	A digital digest, also known as a digital fingerprint, is a fixed-length string generated by applying a hash function to plaintext. Common digest algorithms include MD5, SHA-1, and SHA-256. For Android apps: Enter the MD5 hash of the certificate in hexadecimal format. For iOS apps: Enter the SHA-1 value of the certificate in hexadecimal format. For HarmonyOS apps: Enter the fingerprint value of the certificate in hexadecimal format.

Obtain feature information for an Android app

You can use the ICP Filing Assistant to automatically detect the package name, signature, public key, and other feature information for your Android app. Upload the app installation package to avoid entering this information manually.

There are multiple ways to obtain the package name, public key, and MD5 signature. The following steps use the JadxGUI tool as an example.

Download the JadxGUI tool. After installation, use the tool to open the APK package.
Obtain the public key and MD5 signature. Find the Modulus (public key) and MD5 signature in the APK signature file.
Obtain the package name. In Resource files, find the value of the package property in the AndroidManifest.xml file.

Obtain feature information for an iOS app

Go to https://developer.apple.com/cn/ and log on with the iOS developer account for the app.
Obtain the Bundle ID. In Program Resources, go to Identifiers. The value in the IDENTIFIER column is the Bundle ID.
Obtain the public key and SHA-1 signature value. In Program Resources, go to Certificates. Click the certificate for the app and download it. Open the downloaded certificate file to view its details. You can find the public key (Public Key) and the SHA-1 signature value (SHA-1) in the details.
- Public key (Public Key)
  
  Note
  If the Public Key is not fully displayed, click the ellipsis (...). If the ellipsis does not expand or is not displayed, copy the visible part of the Public Key value.
- SHA-1 signature value (SHA-1)

Obtain feature information for a HarmonyOS app

Log on to AppGallery Connect with the HarmonyOS developer account for the app and click My projects.
On the My projects page, click the project for the app whose feature information you want to query.
On the app project page, find the package name in the App area. This value is the required app package name.
Obtain the public key and digital fingerprint value.
1. Click Certificates, App IDs & Profiles.
2. On the Certificates, App IDs & Profiles page, download the HarmonyOS app developer certificate required for ICP filing.
3. After you download the app developer certificate, open it with a text editor, such as Notepad or VSCode. Delete the certificate chain section and save the file.
  1. Delete the certificate chain, which is enclosed in the red box in the figure, and keep only the last certificate block.
  2. The following figure shows the result after deletion:
4. Open the saved certificate file and go to Details > Public key to obtain the app's public key.
5. Go to Details > Fingerprint to obtain the app's signature fingerprint value.