
CHAPTER 1 Overview
C435HD Users & Administrator's Manual
Running Android in Kiosk Mode
Android Kiosk Lockdown software 'locks down' Android devices to only allow essential apps by
disabling access to the Home / Launcher. Using Android Kiosk Lockdown software, Android
devices can be converted into public kiosk terminals or secured work devices.
■
Only specific Microsoft apps and AudioCodes-signed apps that were certified and
approved in the certification process can run in Kiosk mode; even if a malicious user
manages to install a new unauthorized app on the file system, the launcher on the
AudioCodes Native Teams device will only run those specific approved apps and this
cannot be changed in run time (only with a new software code provided by AudioCodes).
Screen Lock
AudioCodes Native Teams devices use a screen lock mechanism to prevent any malicious
user/users from gaining access to Calendar information and / or Active Directory list of
employees and / or triggering unauthorized Teams calls from the device. After enabling screen
lock, the device automatically locks after a preconfigured period; a code is required to unlock
the device and resume full operation.
AudioCodes Private Key
The system software on AudioCodes Native Teams devices is signed with AudioCodes' private
key. Users can replace the complete software only with new software that is also signed by
AudioCodes' private key.
This prevents users from replacing the complete over-the-air (OTA) package of the device with
any new system software, unless the software is fully signed by AudioCodes.
Android Debug Bridge (ADB)
AudioCodes disabled the Android Debug Bridge (ADB) application and keeps the Teams app
running in the front all the time. As a result, it's impossible to install other apps from unknown
sources, and to sideload apps.
App Signing
Android requires all apps to be digitally- signed with a developer key before installation;
currently, the AudioCodes Native Teams devices verify that apps are signed by Microsoft.
App signing prevents malicious user/users from replacing a Microsoft-signed app with an app
that "pretends" to be Microsoft but which lacks the private key that is known only to
Microsoft.
Web Browser
The AudioCodes Native Teams device does not include a Web browser. Users cannot browse
to the public internet or internal intranet. All Web services are customized to connect to Office
- 6 -