AudioCodes C470HD - Device File System; Keystore; Device Certificate; Data Protection

CHAPTER1 Overview
C470HD | Users & Administrator's Manual
Device File System
TheAudioCodesdevice'sfilesystemisencryptedonC470HDdevices.Customersmayenforcea
policyofdeviceencryptionviaMicrosoft'scloud-basedIntuneservice.
Keystore
WithAudioCodesdevices,thecertificatekeysareencryptedonthedevicefilesystem.
Device Certificate
AudioCodesdevicesareshippedwithauniquecertificatewhichissignedbyAudioCodesRoot
CA.Networkadministratorscaninstallathird-partycertificateonthephoneinthecustomer’s
trusted  environment.  Network administrators  should  follow  the  following  guidelines  when 
replacingtheexistingdevicecertificate:
■ ThedevicecertificateURLwillonlybevalidifnoSCEPserverURLispresent
■ Usethefollowingtwoparameterstosetthedevicecertificateinthephone'sconfiguration
file:
● security/device_certificate_url=http://<server-ip>/device.crt
● security/device_private_key_url=http://<server-ip>/device.key
Trusted certificates are provisioned by parameter security/ca_certificate/[0-4]/
Data Protection
AudioCodesdevicesrunAndroidwhichhasintegralproceduresforprotectingandsecuringuser
data.
Debugging Interface
■ AudioCodesdevicesleverageSSHasadebugginginterface.
■ AudioCodesrecommendsthatcustomersdisableSSHondevicesviaAudioCodes'Device
Manager(OVOC).
■ AudioCodesrecommendschangingtheAdminpasswordfromthedefault,viatheTeams
AdminCenterorAudioCodes'DeviceManager(OVOC).
■ Whenadevice-ormultipledevices-needstobedebugged,userscanenableSSHonit/
them,accessSSHwiththenewAdminpasswordforthedebuggingphase,anddisableSSH
oncedebuggingisfinished.
SSH is by default disabled and can be enabled with Administrator permissions in the
phone screen (Device Administration > Debugging > SSH).
- 8 -