
CHAPTER1 Overview C435HD Users & Administrator's Manual
Running Android in Kiosk Mode
AndroidKioskLockdownsoftware'locksdown'Androiddevicestoonlyallowessentialappsby
disablingaccesstotheHome/ Launcher.UsingAndroidKiosk Lockdownsoftware,Android
devicescanbeconvertedintopublickioskterminalsorsecuredworkdevices.
■OnlyspecificMicrosoftappsandAudioCodes-signedappsthatwerecertifiedand
approvedinthecertificationprocesscanruninKioskmode;evenifamalicioususer
managestoinstallanewunauthorizedapponthefilesystem,thelauncheronthe
AudioCodesNativeTeamsdevicewillonlyrunthosespecificapprovedappsandthis
cannotbechangedinruntime(onlywithanewsoftwarecodeprovidedbyAudioCodes).
Screen Lock
AudioCodes Native Teams devices use a screen lock mechanism to prevent any malicious
user/users from gaining access to Calendar information and / or Active Directory list of
employeesand/ortriggeringunauthorizedTeamscallsfromthedevice.Afterenablingscreen
lock,thedeviceautomaticallylocksafterapreconfiguredperiod;acodeisrequiredtounlock
thedeviceandresumefulloperation.
AudioCodes Private Key
ThesystemsoftwareonAudioCodesNativeTeamsdevicesissignedwithAudioCodes'private
key.Userscanreplacethecompletesoftwareonlywithnewsoftwarethatisalsosignedby
AudioCodes'privatekey.
Thispreventsusersfromreplacingthecompleteover-the-air(OTA)packageofthedevicewith
anynewsystemsoftware,unlessthesoftwareisfullysignedbyAudioCodes.
Android Debug Bridge (ADB)
AudioCodesdisabledtheAndroidDebugBridge(ADB)applicationandkeepstheTeamsapp
runninginthefrontallthetime.Asaresult,it'simpossibletoinstallotherappsfromunknown
sources,andtosideloadapps.
App Signing
Android requires all apps to be digitally- signed with a developer key before installation;
currently,theAudioCodesNativeTeamsdevicesverifythatappsaresignedbyMicrosoft.
Appsigningpreventsmalicioususer/usersfromreplacingaMicrosoft-signedappwithanapp
that "pretends" to be Microsoft but which lacks the private key that is known only to
Microsoft.
Web Browser
TheAudioCodesNativeTeamsdevicedoesnotincludeaWebbrowser.Userscannotbrowse
tothepublicinternetorinternalintranet.AllWebservicesarecustomizedtoconnecttoOffice
- 6 -