Secure Configuration Store

A secure configuration store enables you to publish scoped key-value configuration that the mobile SDK reads using end-to-end encryption. It addresses values that would otherwise be hardcoded in the mobile app and provides secure, per-device storage.

Two scopes are supported:

• APPLICATION — configuration visible to all users of the application. This enables a more secure exchange of data with the server.
• ACTIVATION — configuration visible only in the context of the activation. This enables per-device secure storage.

The configuration is stored in the dedicated pa_config_store table (see below), and the config_data value is encrypted at rest using the configured per-record encryption algorithm.

Management

Entries can be managed through the management API:

• create or update a single configuration item,
• list the stored configuration items,
• remove a single configuration item from the target document.

Database

A database table pa_config_store is used to store the secure configuration values.

The configuration store holds scoped key-value configuration as a JSON document, either at the application level or per-activation.