AudioCodes C435HD - Running Android in Kiosk Mode; Screen Lock; Audiocodes Private Key; Android Debug Bridge (ADB)

CHAPTER1 Overview
C435HD Users & Administrator's Manual
Running Android in Kiosk Mode
AndroidKioskLockdownsoftware'locksdown'Androiddevicestoonlyallowessentialappsby
disablingaccesstotheHome/ Launcher.UsingAndroidKiosk Lockdownsoftware,Android
devicescanbeconvertedintopublickioskterminalsorsecuredworkdevices.
■ OnlyspecificMicrosoftappsandAudioCodes-signedappsthatwerecertifiedand
approvedinthecertificationprocesscanruninKioskmode;evenifamalicioususer
managestoinstallanewunauthorizedapponthefilesystem,thelauncheronthe
AudioCodesNativeTeamsdevicewillonlyrunthosespecificapprovedappsandthis
cannotbechangedinruntime(onlywithanewsoftwarecodeprovidedbyAudioCodes).
Screen Lock
AudioCodes Native Teams devices usea screenlock mechanism to prevent any malicious 
user/users  from  gaining access  to  Calendar  information  and  /  or  Active  Directory  list of 
employeesand/ortriggeringunauthorizedTeamscallsfromthedevice.Afterenablingscreen
lock,thedeviceautomaticallylocksafterapreconfiguredperiod;acodeisrequiredtounlock
thedeviceandresumefulloperation.
AudioCodes Private Key
ThesystemsoftwareonAudioCodesNativeTeamsdevicesissignedwithAudioCodes'private
key.Userscanreplacethecompletesoftwareonlywithnewsoftwarethatisalsosignedby 
AudioCodes'privatekey.
Thispreventsusersfromreplacingthecompleteover-the-air(OTA)packageofthedevicewith
anynewsystemsoftware,unlessthesoftwareisfullysignedbyAudioCodes.
Android Debug Bridge (ADB)
AudioCodesdisabledtheAndroidDebugBridge(ADB)applicationandkeepstheTeamsapp
runninginthefrontallthetime.Asaresult,it'simpossibletoinstallotherappsfromunknown
sources,andtosideloadapps.
App Signing
Android requires  allapps  to  be  digitally-signed with a  developer  key before  installation; 
currently,theAudioCodesNativeTeamsdevicesverifythatappsaresignedbyMicrosoft.
Appsigningpreventsmalicioususer/usersfromreplacingaMicrosoft-signedappwithanapp
that  "pretends"  to  be  Microsoft  but  which  lacks  the  private  key  that  is  known  only  to 
Microsoft.
Web Browser
TheAudioCodesNativeTeamsdevicedoesnotincludeaWebbrowser.Userscannotbrowse
tothepublicinternetorinternalintranet.AllWebservicesarecustomizedtoconnecttoOffice
- 6 -