R&S®BizzTrust 3.

5
Release Notes

© 2017 Rohde & Schwarz GmbH & Co. KG

Mühldorfstr. 15, 81671 Munich, Germany
Phone: +49 89 41 29 - 0
Fax: +49 89 41 29 12 - 164
E-Mail: info@rohde-schwarz.com
Internet: https://cybersecurity.rohde-schwarz.com/

Subject to change
R&S® is a registered trademark of Rohde & Schwarz GmbH & Co. KG. Trade names are trademarks of the owners.

The firmware of the instrument makes use of several valuable open source software packages. For information, see the "Open Source
Acknowledgment" on the user documentation (included in delivery).
Rohde & Schwarz Cybersecurity
BizzTrust 3.5 Release Notes

PAD-T-M: 3574.3288.02/02.00/CI/1/EN
R&S BizzTrust 3.3 Contents

Contents
1Introduction 3
1.1Related Documents ...............................................................................................................................3

2Current Version and History ..................................................................................... 4

2.1BizzTrust 3.5.4 4
2.2BizzTrust 3.3.0 5
2.3BizzTrust 3.2.1 6
2.4BizzTrust 3.2.0 6
2.5BizzTrust 3.1.0 8

3Modified Documentation and Overview ................................................................... 9

4Supported Hardware ................................................................................................ 10

5Hints for Administrators .......................................................................................... 11

6Hints for End-Users ................................................................................................. 12

R&S Cybersecurity 2
R&S BizzTrust 3.5 Release Notes

1 Introduction
This document includes information on the current version and history of BizzTrust
including new features, modified features, and known issues.

1.1 Related Documents

The following documents relate to the BizzTrust roadmap:
 R&S Cybersecurity TrustedObjects Manager Release Notes
 R&S Cybersecurity BizzTrust for Android Administration Guide
 R&S Cybersecurity KATIM Release Notes
 R&S Cybersecurity TrustedVPN Release Notes

R&S Cybersecurity 3
R&S BizzTrust 3.5 Release Notes

2 Current Version and History

2.1 BizzTrust 3.5.4

New Features
Device Pooling
BizzTrust allows multi-user operation on shared pool devices. Pool users authenticate
themselves using their directory credentials (e.g., LDAP).
KATIM for Pooling
KATIM is pooling enabled. BizzTrust transfers the users’ security from one device to the
next.
Managed Configurations
Central configuration of the NineWorks PIM app using the Android Managed
Configurations standard.
Automatic APN Configuration
BizzTrust configures APN settings automatically using a config file while initially
provisioning the BizzTrust device. Defining multiple APNs is also possible.
TVD based Microphone Control
BizzTrust controls access to the microphone by TVD policy.

Improvements
Pooling App Delivery
BizzTrust now features an improved update mechanism for apps used in a pooling
operation.
Device Owner Installation
BizzTrust features device owner apps.
Accidental Display Activation
BizzTrust disables the “touch twice to activate” feature in order to prevent accidental
touch panel activation.
Extended Logging Information
 TOM logs are now more informative when entering user credentials
 Send logs to TOM for invalid Recovery Key (>=TOM 17.08)
BOTAN Integration
BizzTrust integrates the BSI certified BOTAN cryptographic library.

Platform
Android Version
Android 6.0.1 R78 – Patch Level 2017-01-05
Sony Base Version
2017-02-23

Known Issues
Xperia X: Touch Panel non-responsive
In some cases the touch panel does not react to input events. Turning the touch panel
off and on using the power button temporarily resolves this issue.
Xperia X: Charging
In some cases, charging with USB and other power sources does not work in a reliable
way. To ensure charging using a laptop it is advised to use the special USB charging
port labeled with a battery symbol.

R&S Cybersecurity 4
R&S BizzTrust 3.5 Release Notes

2.2 BizzTrust 3.3.0

New Features
Look & Feel
Rohde & Schwarz Cybersecurity design (boot logo and wallpaper).
Initials Support for KATIM
Initials of users defined by the TOM are send to KATIM app.
Extended Settings
“Extended Settings” app has been added allowing users to select the camera resolution
and, for Z3 tablet compact, the actuator.
Smartlock Feature Disabled
For security reasons, the smartlock feature has been disabled.
Accessibility Feature Disabled
For security reasons, the accessibility feature has been disabled.

Improvements
Booting during USB connection
It is now possible to boot and reboot devices even if they are connected to USB.
Z5 hands free mode
GSM hands free mode has been fixed.
WI-FI reactivation
WI-FI is not reactivation any more after a TOM reconnection if it has been deactivated
by the user.
MDM: Bluetooth now fully disabled
Bluetooth cannot be enabled any more if disabled by TVD policy.
Xperia X Improvements
Audio & video recoding has been enabled.

Platform
Android Version
Android 6.0.1 R78 – Patch Level 2017-01-05
Sony Base Version
2017-02-23

Known-Issues
Xperia X: Low audio on video recordings
On some devices, video recordings have a very low audio volume.
Firefox not working
Due to the code hardening features, current versions of the Firefox app are not allowed
to be executed.
Pictures of selfie camera mirrored
Images and videos which are made by the selfie camera are mirrored.
Xperia X/Compact: Touchscreen responsiveness
The touchscreen may respond sluggishly when the device is locked.

R&S Cybersecurity 5
R&S BizzTrust 3.5 Release Notes

2.3 BizzTrust 3.2.1

Improvements
Compatibility of Non-HSM with KATIM
Fixed generation of SCIP key for software version.
Disabling of Bluetooth
Bluetooth cannot be enabled any more via switchbar if disabled by TOM.
Removed FM-radio for higher stability
BRCM module removed from BizzTrust kernel, to prevent kernel crashes and reboots

Platform
Android Version
Android 6.0.1 R74
Sony Base Version
2016-12-08

Known-Issues
Device start during battery charging
Starting of the device does not work (red LED blinking three times) when the device is
turned off and in charging mode. See Section 6 for more details and information how to
start BizzTrust.
Video recording not reliable
Video recoding does sometimes not work. Typically, a reboot solves this issue
temporarily.
Firefox not working
Due to the code hardening features, current versions of the Firefox app are not allowed
to be executed.
Low Loudspeaker Volume
On Z5 devices, the internal loudspeaker (hands-free speaker) is very low on GSM calls.
Pictures of Selfie Camera mirrored
Images and videos which are made by the selfie camera are mirrored.

2.4 BizzTrust 3.2.0

New Features
Hardening
Several GR-Security patches have been enabled for 64-Bit devices such as the Sony
Xperia Z5 family.
Secure Voice & Chat Support for non-HSM version
The secure voice & chat app is now also supported by the non-HSM version of
BizzTrust.
Logging of Firmware Changes
In case of a firmware change, BizzTrust now sends audit log entries to the central
management.
Logging of App Changes
BizzTrust now sends audit log messages to the central management in case an app
has been installed/updated/removed by the TOM. For privacy reasons, app changes of
other app stores, e.g., using the Google play store, will not be logged.

R&S Cybersecurity 6
R&S BizzTrust 3.5 Release Notes

Modified Features
Renaming
“BizzTrust Device Management” tab has been renamed to “Device Management” and
“BizzTrust VPN” has been renamed to “VPN”
DeskClock App removed
In order to remove external dependencies of BizzTrust, the DeskClock app has been
removed from the BizzTrust image. The newest version of this app can be downloaded
from Google play store.

Improvements
Disabling of Bluetooth by the TOM
The bluetooth stack can again be permanently disabled using MDM functions of the
central management.
Disabling of WI-FI
The WI-FI stack can again be permanently disabled using MDM functions of the central
management.

Platform
Android Version
Android 6.0.1 R74
Sony Base Version
2016-12-08

Known-Issues
Firefox not working
Due to the code hardening features, current versions of the Firefox app will not work
due to security issues.
Low Loudspeaker Volume
On Z5 devices, the internal loudspeaker (hands-free speaker) is very low on GSM calls.
Pictures of Selfie Camera mirrored
Images and videos which are made by the selfie camera are mirrored.
USB connection not reliable
In some cases, USB reconnections do not work. A reboot fixes this issue temporarily.
Exchange Client
Due to the fact that Android 6.0.1-r46 and later do not include an Exchange client any
more, automatic configuration of business exchange accounts have been removed
Hardening
At the moment, BizzTrust 3.x does not support all kernel hardening features of
BizzTrust 2.x.x

R&S Cybersecurity 7
R&S BizzTrust 3.5 Release Notes

2.5 BizzTrust 3.1.0

New Features
Pending Firmware Updates
Firmware updates will be automatically downloaded (as before), but the user is able to
decide when the update process is started

Modified Features
Firmware Update
The firmware update is only started if the battery level is above 50%. This prevents
broken devices due to power loss during the firmware update
Firmware Update
Update certificate has been updated (now valid until 09/2021). See Section 5 for more
information.

Improvements
KATIM Contact Synchronization
KATIM contacts can now be synchronized even if the VPN is deactivated
Contact Import
Contacts can again be imported form the SIM card
Live background
Live backgrounds can again be activated
GUI Stuttering
The stuttering of the GUI, which sometimes occurred in version 3.0.0, has been
reduced

Platform
Android Version
Android 6.0.1 R66
Sony Base Version
2016-09-22

Known-Issues
Exchange Client
Due to the fact that Android 6.0.1-r46 and later do not include an Exchange client any
more, automatic configuration of business exchange accounts have been removed
Kernel Hardening
At the moment, BizzTrust 3.0.0 does not support all kernel hardening features of
BizzTrust 2.x.x

R&S Cybersecurity 8
R&S BizzTrust 3.5 Release Notes

3 Modified Documentation and Overview

Version Document Updated
17.05.3 TrustedObjects Manager Operations & Maintenance Manual 
3.5.4 BizzTrust for Android Administration Guide 

R&S Cybersecurity 9
R&S BizzTrust 3.5 Release Notes

4 Supported Hardware
BizzTrust 3.5.4 supports the following smartphone devices:
 Sony Xperia X
 Sony Xperia X compact
 Sony Xperia Z5
 Sony Xperia Z5 compact
 Sony Xperia Z3 tablet compact
 Sony Xperia Z3
 Sony Xperia Z3 compact

R&S Cybersecurity 10
R&S BizzTrust 3.5 Release Notes

5 Hints for Administrators

BizzTrust has been tested with the following infrastructure:

Product Version Updated

TrustedObjects Manager 17.05.3 
TrustedVPN 5.4.2 
KATIM 1.7.2 
CryptoGateway 2.5.0 

R&S Cybersecurity 11
R&S BizzTrust 3.5 Release Notes

6 Hints for End-Users

USB Connection
Since Android 6, device connections through the USB port have been set to charge-
only mode by default. To access the unclassified file system over a USB connection,
end users must explicitly grant permission for such interactions. This does not apply to
earlier versions e.g. Android 5.x.

R&S Cybersecurity 12