AudioCodes C470HD - App Signing; Web Browser; Remote Configuration Management; Audiocodes Device Manager Validation

CHAPTER1 Overview
C470HD | Users & Administrator's Manual
App Signing
Android  requires  all  apps  to  be  digitally- signed  with  a  developer  key  before  installation; 
currently,theAudioCodesdevicesverifythatappsaresignedbyMicrosoft.
Appsigningpreventsmalicioususer/usersfromreplacingaMicrosoft-signedappwithanapp
that"pretends"tobeMicrosoftbutwhichlackstheprivatekeythatisknownonlytoMicrosoft.
Web Browser
TheAudioCodesdevicedoesnotincludeaWebbrowser.Userscannotbrowsetothepublic
internetorinternalintranet.AllWebservicesarecustomizedtoconnecttoOffice365services
andAudioCodes'managedservicessuchastheOneVoiceOperationsCenter(OVOC).
WithoutaWebbrowser,malicioususer/userswillnotbeabletoaccessthedeviceandbrowse
fromitasatrusteddeviceintothecustomernetwork.
Remote Configuration Management
AudioCodesdevicesdonothaveanembeddedWebserver.Configurationandmanagementare
performedusingoneofthefollowingremoteinterfaces:
■ MicrosoftTeamsAdminCenter(forNativeTeamsdevices)overHTTPSprotocols,enabled
afterasuccessfulsign-inauthenticationprocess.
■ AudioCodesDeviceManager(partofAudioCodes'OVOCsuite)overHTTPS.
■ DebugginginterfaceoverSSH.NotethatSSHmustbedisabledbydefaultandenabledonly
perspecificcasefordebuggingpurposesonly.
AudioCodes Device Manager Validation
TheAudioCodesNativeTeamsdevicesvalidatetheAudioCodesDeviceManageridentityusinga
knowntrustedcertificate:
■ Thedeviceisshippedwithknowntrustedcertificateinstalled.SeeAudioCodesRootCA
Certificateonpage9.
■ Fortheinitialconnection,theAudioCodesDeviceManageraccessesdevicesusingaknown
trustedcertificate.
■ Onceasuccessfulsecuredconnectionhasbeenestablishedbetweenthedeviceandthe
DeviceManager,theusercanreplacethetrustedcertificateontheDeviceManagerandon
thephone,andre-establishtheconnectionleveraginganyPrivateTrustedCertificate.
Sandboxing
AudioCodesdevicesuseAndroidApplicationSandboxsothateachapplicationcanaccessits
owndataandisisolatedfromotherapplications.Thispreventsamaliciousappfromaccessing
thecodeorthedataofotherapplicationsinthesystem.
- 7 -