AudioCodes C455HD - Audiocodes Device Manager Validation; Sandboxing; Device File System; Keystore

CHAPTER1 Overview
C455HD | Users & Administrator's Manual
■ AudioCodesDeviceManager(partofAudioCodes'OVOCsuite)overHTTPS.
■ DebugginginterfaceoverSSH.NotethatSSHmustbedisabledbydefaultandenabledonly
perspecificcasefordebuggingpurposesonly.
AudioCodes Device Manager Validation
TheAudioCodesNativeTeamsdevicesvalidatetheAudioCodesDeviceManageridentityusinga
knowntrustedcertificate:
■ Thedeviceisshippedwithknowntrustedcertificateinstalled.SeeAudioCodesRootCA
Certificateonthenextpage.
■ Fortheinitialconnection,theAudioCodesDeviceManageraccessesdevicesusingaknown
trustedcertificate.
■ Onceasuccessfulsecuredconnectionhasbeenestablishedbetweenthedeviceandthe
DeviceManager,theusercanreplacethetrustedcertificateontheDeviceManagerandon
thephone,andre-establishtheconnectionleveraginganyPrivateTrustedCertificate.
Sandboxing
AudioCodesdevicesuseAndroidApplicationSandboxsothateachapplicationcanaccessits
owndataandisisolatedfromotherapplications.Thispreventsamaliciousappfromaccessing
thecodeorthedataofotherapplicationsinthesystem.
Device File System
TheAudioCodesdevice'sfilesystemisencryptedon455HDdevices.Customersmayenforcea
policyofdeviceencryptionviaMicrosoft'scloud-basedIntuneservice.
Keystore
WithAudioCodesdevices,thecertificatekeysareencryptedonthedevicefilesystem.
Device Certificate
AudioCodesdevicesareshippedwithauniquecertificatewhichissignedbyAudioCodesRoot
CA.Networkadministratorscaninstallathird-partycertificateonthephoneinthecustomer’s
trusted  environment.  Network administrators  should  follow  the  following  guidelines  when 
replacingtheexistingdevicecertificate:
■ ThedevicecertificateURLwillonlybevalidifnoSCEPserverURLispresent
■ Usethefollowingtwoparameterstosetthedevicecertificateinthephone'sconfiguration
file:
● security/device_certificate_url=http://<server-ip>/device.crt
● security/device_private_key_url=http://<server-ip>/device.key
- 8 -