CHAPTER1 Overview
C455HD | Users & Administrator's Manual
Android-Level Security Hardening
Major Android- level system- level developments have been incorporated into AudioCodes'
NativeTeamsdevicestoimprovesecurity:
■ SeeGooglePlayServicesbelow
■ SeeRunningAndroidinKioskModebelow
■ SeeScreenLockonthenextpage
■ SeeAudioCodesPrivateKeyonthenextpage
■ SeeAndroidDebugBridge(ADB)onthenextpage
■ SeeAppSigningonthenextpage
■ SeeWebBrowseronthenextpage
■ SeeRemoteConfigurationManagementonthenextpage
■ SeeAudioCodesDeviceManagerValidationonpage8
■ SeeSandboxingonpage8
■ SeeDeviceFileSystemonpage8
■ SeeKeystoreonpage8
■ SeeDeviceCertificateonpage8
■ SeeDataProtectiononpage9
■ SeeDebuggingInterfaceonpage9
■ SeeAndroidSecurityUpdatesonpage9
Google Play Services
GogglePlayserviceswereremovedfromtheAudioCodesNativeTeamsdevicesoftware.Access
toanyGooglestoreorPlayserviceisnotallowed.
■ UpdatingtheAudioCodesNativeTeamsdevice'sAndroidsoftwareandapplicationis
performedviaspecialsoftwarecomponentsthateitherconnecttotheTeamsAdmin
CenterortoAudioCodes'DeviceManageroverasecuredchannel.
Running Android in Kiosk Mode
AndroidKioskLockdownsoftware'locksdown'Androiddevicestoonlyallowessentialappsby
disablingaccessto theHome/Launcher.UsingAndroidKiosk Lockdownsoftware,Android
devicescanbeconvertedintopublickioskterminalsorsecuredworkdevices.
■ OnlyspecificMicrosoftappsandAudioCodes-signedappsthatwerecertifiedandapproved
inthecertificationprocesscanruninKioskmode;evenifamalicioususermanagesto
installanewunauthorizedapponthefilesystem,thelauncherontheAudioCodesNative
Teamsdevicewillonlyrunthosespecificapprovedappsandthiscannotbechangedinrun
time(onlywithanewsoftwarecodeprovidedbyAudioCodes).
- 6 -