Bittium Tough Mobile™ 2 - Ultra Secure Smartphone for Professionals

Operating system
Android™ 11
Available with or without Google Mobile Services

Chipset                             
Qualcomm® Snapdragon™ 670

Memory
4GB RAM / 64GB eMMC. MicroSD expansion slot up to 256GB

Display
5.2” Full HD sunlight readable
Glove & wet usable capacitive touchscreen

Imaging & video
12MP autofocus rear-facing and 5MP front-facing cameras
4K and Full HD video

Audio
High-quality front-facing dual speakers (109dB@5cm SPL)
Multi-microphone active noise cancellation

Physical buttons
Privacy mode activation
Emergency button (programmable, use as emergency button requires a separate application providing the functionality)
PTT/PTV (programmable, use as PTT/PTV button requires a separate application providing the functionality)
Power/wake-up
Volume up and down

LTE and bands
3GPP Rel 12
Dual SIM dual VOLTE (DSDV)
IMS, VoLTE, CA
FDD bands: 1, 2, 3, 4, 5, 7, 8, 12, 13, 14, 17, 20, 25, 26, 28, 29, 30, 66
TDD bands: 38, 39, 40 (34, 41 optional)

UMTS/HSPA bands
B1, B2, B4, B5, B8

GSM/GPRS/EDGE bands
850/900/1800/1900 MHz

Complementary radios
Wi-Fi 802.11 a/b/g/n/ac (2.4 and 5Ghz)
BT5.0, NFC
_{*U-NII-3 Wi-Fi channels are not supported}

For all Bittium Tough Mobile™ 2 users

• All data in the device is encrypted with AES-256 encryption (including the memory card, when used in adoptable storage mode)
• Dedicated secure element (chipset) for storing security keys and providing functionality for encryption and user authentication
• Backup battery allowing monitoring of the device security and tamper detection at all times, even when the main battery has ran out
• Android™ 11 operating system with hardened security
• Hardware-based Privacy Mode preventing ambient listening and spying of user/user environment
• Hardware tamper detection preventing data theft and device implanting attempts
• Secure boot, device HW and SW integrity check during boot
• Disabled debug interfaces preventing attacks against device security
• Device OS rollback prevention – not possible to use older device firmware for attacking the device
• Die shield sensor in secure element to protect from physical intrusion and electromagnetic signal sniffing
• Environmental attack protection in secure element preventing e.g. cryo/cold attacks and power glitch attacks
• Application permission control – users can allow only trusted applications to access device data and functionality
• User originated fast wipe of device data

For users with Bittium Secure Suite™

• Audit logs for security related events
• Remote wipe of device
• Remote attestation
• Application whitelisting support
• Bittium SafeMove® MDM support
• Bittium SafeMove® Mobile VPN to encrypt data in transit
• Hardened password policy
• Multicontainer feature

Bittium Tough Mobile™ 2 datasheet (pdf)

Bittium Tough Mobile™ 2 C datasheet (pdf)

Bittium Tough Mobile™ 2 Brochure (pdf)

Bittium Secure Suite™ datasheet (pdf)

Bittium Secure Call™ datasheet (pdf)

Tough Mobile 2 Quick Start Guide (pdf)

Multicontainer for Bittium Tough Mobile™ smartphones (pdf)

Bittium White Paper Mobile Device Security (pdf)

Video: Bittium Tough Mobile™ 2 for Public Safety Communication

Video: Bittium Tough Mobile™ 2 for Tactical Communication

Video: Bittium Tough Mobile™ 2 for Business

Video: Bittium Tough Mobile™ 2 – IP67 features

Video: Bittium Tough Mobile™ 2 – MIL-STD-810G features

Authority/governmental/corporate customers, please contact us about accessories for your specific use cases.

Protective case is also available from Kickmobiles’ webshop.

Question:
Does Bittium Tough Mobile 2 differ from a regular smartphone?
Answer:
Bittium Tough Mobile 2 differs from a standard off-the-shelf smartphone as it is designed for secure use.
For example, it has a dedicated secure element storing encryption keys and performing cryptographic operations. The Android 10 based operating system’s security is hardened by Bittium to utilize the dedicated hardware secure element.
It has a mechanical and electrical concept that has been designed to provide a long lifespan for the device. Bittium will also provide software security updates longer than what is usual for regular consumer smartphones.
The phone also has a unique hardware-based privacy mode for disabling microphones, cameras, Bluetooth, and reducing sensor sensitivity with a touch of a button.

Question:
Who can buy the phones and where?
Answer:
Bittium secure communications solutions, including Bittium Tough Mobile 2 smartphones, are available from selected reseller and system integrator partners, and also directly from Bittium.
Bittium Secure Call and Bittium Secure Suite require installation of a server software, which is provided either as a dedicated IT service or as an on-site solution hosted and managed by the customer.

Question:
Where are the phones manufactured?
Answer:
Tough Mobile 2 smartphones are designed and manufactured in Finland. Manufacturing is supervised by Bittium and can be audited for certification purposes.

Question:
Can Tough Mobile 2 be used in commercial networks?
Answer:
Yes, Tough Mobile 2 can be used in commercial networks as well as in private networks.

Question:
In which countries can I use Tough Mobile 2?
Answer:
Tough Mobile 2 can be used globally and it supports the majority of the used cellular bands. For additional details of the supported bands, please see the supported bands in the Tough Mobile 2 datasheet or in this website’s Device Highlights section.

Question:
What does Tough Mobile 2’s “long lifespan” mean?
Answer:
The phone has a mechanical and electrical concept that has been designed to provide a long lifespan for the device. For example, it has military-grade durability (MIL-STD-810G) and in addition, Bittium provides operating system and software security updates longer than what is usually provided for regular smartphones, minimum until year 2026.

Question:
Can I use any Android application with Tough Mobile 2?
Answer:
Yes, Tough Mobile 2 is verified by Google and it is compatible with all Android applications available for Android 11 or newer.

Question:
Can Tough Mobile 2 be customized?
Answer:
Yes, Tough Mobile 2 can be customized when buying larger quantities. Please contact us for further details.

Question:
Can I get Tough Mobile 2 without Google Mobile Services?
Answer:
Yes, there are two variants of Tough Mobile 2 available:
1) Tough Mobile 2 with Google Mobile Services (like Google Play, Gmail, Maps) if you wish to utilize Google’s services.
2) Tough Mobile 2 without Google Mobile Services, if you don’t want to utilize Google’s services.

Question:
When using the Tough Mobile 2 variant without Google Mobile Services and Google Play, am I able to install applications?
Answer:
If your organization has Bittium Secure Suite software product and its back-end server in use you can install approved Android applications through the Application Library.
If you don’t have Bittium Secure Suite with the server environment available, it is possible to use different 3rd party application stores for installing apps or side load them via Bluetooth or USB (as APKs). Please note that some applications may require Google (GMS) API’s, which are not available in Tough Mobile 2 without Google Mobile Services. Therefore, those applications may not work properly or even cannot be installed.

Question:
Can I receive further details about mobile security and specific product features?
Answer:
All publicly available product information is on our website. More detailed technical information, training and dedicated customer support is available for B2B customers under Non-Disclosure-Agreement (NDA). 

Question:
How long will the security updates be available?
Answer:
Bittium Tough Mobile 2 is guaranteed to have a long life cycle and support for security updates. Device security updates will be available minimum until year 2026.

Question:
What does “ultra secure” mean?
Answer:
Ultra secure means that the device has been designed to meet even the highest governmental grade security requirements.
Tough Mobile 2 has been designed for ultra secure use, starting from tamper-proofed mechanics to always-on security monitoring of electronics and hardened software solutions utilizing the Android operating system.
Ultra security is always based on hardware originated tamper proof security solutions.
Bittium ultra security also means that the device has been designed and manufactured by a trusted vendor in Finland.


Question:
What does Tough Mobile 2’s “multilayered security” mean?
Answer:
Tough Mobile 2’s security is built in layers, both in hardware and software.
The security built in the hardware protects data at rest. Security starts from the design and manufacturing of the device, including a hardware secure element that for example stores all authentication data and encryption keys. For software-based security Bittium offers Bittium Secure Suite™ full set of services for securing the data in transit.


Question:
What does Tough Mobile 2’s dedicated hardware secure element do?
Answer:
The hardware secure element provides for example user authentication services for Android, stores device encryption keys and provides cryptographic operations. If the Android OS becomes compromised with malware with access to everything, it still would not be able to access the contents of the secure element.
Secure element also controls the tamper detection feature of the device – even if the device’s main battery has run out. The secure element is powered by its own backup battery.


Question:
How is data in Tough Mobile 2 encrypted?
Answer:
All data in Tough Mobile 2 is encrypted with AES-256 encryption. Tough Mobile 2 supports also encryption for data in SD cards. Data in transit can be encrypted with Bittium SafeMove® Mobile VPN included in Bittium Secure Suite and calls and messages with Bittium Secure Call™ application.


Question:
How is Tough Mobile 2 tamper-proofed?
Answer:
Tough Mobile 2’s secure element detects if someone is trying to for example drill, open, disassemble, or precision cut the device. If tampering is detected, the secure element cryptographically erases all data from the device, even if the main battery has ran out of power. The secure element is powered by its own rechargeable backup battery.

Question:
How is Tough Mobile 2 protected from unwanted hardware implants?
Answer:
Tough Mobile 2 is tamper-proofed, which means that the phone detects if it is dismantled or the SIM slot is opened. For security reasons all data is cryptographically erased in case of dismantling. When the SIM slot is opened, device locks instantly and only the device’s original user can dismiss notification of SIM slot opening by authenticating to the device and continue using the device.


Question:
How is Tough Mobile 2 protected from malicious firmware?
Answer:
Tough Mobile 2 can be used only with Bittium signed firmware delivered by Bittium. Device utilizes secure/trusted boot, OS rollback prevention and the device is non-rootable. In each start up the device checks firmware and hardware integrity. To provide additional security layer, Bittium Secure Suite can be used to remotely attest the device firmware and hardware.


Question:
What does Bittium Secure Suite provide and how can I take it into use with Tough Mobile 2?
Answer:
Bittium Secure Suite is an advanced software product that complements Bittium Tough Mobile 2 with a full set of services for secure communications, including MDM, VPN, remote attestation and application whitelisting. It is available for both private and public organizations, and requires installation of a back-end server, which is provided either as a dedicated IT service or hosted by the customer.
Please contact us to start a trial.

Question:
Is VPN included with Tough Mobile 2?
Answer:
Tough Mobile 2 has Bittium SafeMove® Mobile VPN client software pre-installed. The complementary Bittium Secure Suite software product for Tough Mobile 2 is required to utilize that VPN client to secure data in transit. Please contact us for more information and for starting a Bittium Secure Suite trial.
Tough Mobile 2 device supports also any 3rd party VPN solutions supported by Android operating system.

Question:
What does the Multicontainer solution do?
Answer:
Multicontainer solution enables several isolated workspaces within the same Tough Mobile 2 device preventing data contamination between applications/services located in container workspaces. With Multicontainer, it is possible to use classified data and services from several separate organizations as each container workspace isolates applications, data and network traffic from all other workspace containers. Device can also be used as personal smartphone as workspace containers can be used also to isolate personal applications, data and network traffic from work data.
Services within the workspaces are protected and managed with Bittium Secure Suite. Services in workspace containers can connect to isolated back-ends via container-specific VPN tunnels, providing unique data-in-transit protection for each workspace.


Question:
How can I enable the Multicontainer solution?
Answer:
Multicontainer solution is enabled with the Bittium Secure Suite back-end system as each container uses its own VPN tunnel and server environment for isolating and encrypting data in transit. Please contact us to get the complete solution for your organization.


Question:
How can I create a single container in Tough Mobile 2?
Answer:
User can create a single container without the requirement for using the device management (Bittium Secure Suite) capabilities and Secure Suite license. The container can be created by using the SafeMove application readily available on the device.
First you need to check that you have downloaded and installed the latest system updates in order to take one Container into use, go to Settings -> System -> Advanced -> System updates -> Check now.
After that, you are able to create one container, go to SafeMove application -> press “three stripes” from the top left corner -> Create container -> Provision later.

Question:
What does the hardware-based Privacy Mode mean and how does it work?
Answer:
With Privacy Mode the user can prevent eavesdropping and spying through device by disabling microphones, Bluetooth, cameras and reducing sensor accuracy on the device at the hardware-level. Privacy Mode can be activated/deactivated by pressing and holding the privacy button, which is the topmost button on the right-hand side of the phone. A green indicator light starts blinking on the front side of the phone when Privacy Mode is active.

Question:
How can I make encrypted calls with Tough Mobile 2?
Answer:
Making encrypted calls is possible with dedicated secure voice applications, for example Bittium Secure Call, which are available from Bittium and its solution partners. Please contact us for more information.


Question:
How is Tough Mobile 2’s operating system hardened?
Answer:
For example, Tough Mobile 2’s security/encryption key management, user authentication and true random number generation are moved from Android to Bittium hardware-based secure element. If you would like to discuss what additional hardenings have been made, please contact us.

Question:
How do I get security updates to Tough Mobile 2?
Answer:
All Tough Mobile 2 updates are delivered Over-The-Air (OTA). The device will check the availability of software updates automatically and inform you when an update is available. User can decide when to download and install the software update.

Question:
Can Tough Mobile 2 be security certified for national security purposes?
Answer:
Yes, Tough Mobile 2 has been designed to be certified for national security purposes. Device and manufacturing audits are possible for certification purposes. Read more about the current certifications and approvals here.

Question:
How can I activate the Emergency button?
Answer:
Use of the emergency button requires a separate application providing the functionality. When the suitable application supporting Tough Mobile 2 emergency button has been installed, go to Settings → Buttons → Emergency Button Function and select Emergency application from the list.

Question:
How can I activate the Push-To-Talk button?
Answer:
Use of the PTT/PTV button requires a separate application providing the functionality. When the suitable application supporting Bittium PTT button has been installed, go to Settings → Buttons → PTT Button Function and select PTT application from the list.

Question:
What does “MIL-STD-810G” mean?
Answer:
MIL-STD-810G is a US military standard that defines a broad set of environmental (such as shock, vibration, temperature, humidity) requirements for mobile devices that are designed for use in harsh environments. Tough Mobile 2 has been tested against the MIL-STD-810G shock and drop standards.

Question:
What does “IP67 water and dust resistant” mean?
Answer:
IP67 level water and dust resistant means that the device is built to be protected from dust and is operational after being submerged in 1 meter of water for 30 minutes. IP67 does not mean that device is designed to be used underwater.

Question:
Does the device support dual-SIM functionality?
Answer:
Yes, Tough Mobile 2 supports Dual SIM Dual Standby and has dual nano-SIM slots.

Question:
Can the internal memory/storage be expanded?
Answer:
Yes, Tough Mobile 2 has a combined nano-SIM/MicroSD expansion slot which can be used to provide up to 256GB of additional memory/storage.

Question:
Does the device support external keyboard and display?
Answer:
Yes, Tough Mobile 2 supports external keyboards and displays via its USB-C connector.

Question:
How can I take screenshots with Tough Mobile 2?
Answer:
You can take screenshots by pressing Power and Volume down buttons at the same time. If containers are enabled, taking screenshots is disabled by default.

Question:
What is the battery size/life for the device?
Answer:
Tough Mobile 2 has a 3000mAh embedded battery. Due to the device’s highly optimized power management, it will provide up to 460h standby time and up to 20h talk times. Actual results may vary depending on usage and environmental factors.

To make your battery last longer, you have multiple options.

Turn off tethering and hotspots when you’re not using them, go to Settings -> Network & Internet -> Hotspot & tethering -> Wi-Fi hotspot.

Turn off your Wi-Fi and Wi-Fi scanning when you are not using them, go to Settings -> Network & Internet -> Wi-Fi.

Turn off your Bluetooth when you are not using it, go to Settings -> Connected devices -> Connection preferences -> Bluetooth.

Turn off location when it is not necessary, go to Settings -> Security & location -> Location. Note that some applications and features don’t work without location services.

Turn off Google apps automatic downloads and updates;

go to Google Play -> Settings -> App download preference -> Ask me every time.
go to Google Play -> Settings -> Auto-Update apps -> Don’t auto-update apps.

Question:
Which charger plugs are provided with the phone?
Answer:
Bittium can provide Tough Mobile 2 with either EU, UK or US charger plugs.

Question:
How can I activate the Recovery mode?
Answer:
Make sure the device is powered off.
Press ‘volume up’ button and keep it pressed -> press the ‘power’ button shortly and release it.
You should now enter the screen where you see an Android robot icon and text ‘no command’.

-> Release ‘volume up’ key -> press the ‘power’ key, keep it pressed and press shortly ‘volume up’ key -> release ‘power’ key.

You should now enter the recovery menu where you can perform a factory reset. Use volume up and down keys for navigation, ‘power’ key for menu item selection.

Note: If ‘power’ key is pressed over 10s, the phone will automatically restart.  Start over from the beginning if this happens.

Question:
How long is the product warranty?
Answer:
Product warranty for Bittium Tough Mobile 2 is one (1) year, including all accessories provided in the sales box, against defects in materials or workmanship. If the device is found to be defective within the one year warranty period, Bittium will repair or replace it with a new or refurbished device, at its option, at no charge to the customer, except as set forth below.
This warranty does not cover cosmetic damage, or device failure caused by liquid damages, or damage due to misuse, abuse, negligence, accident, modification or disassembly of any part of the device. The warranty does not cover damage due to improper operation or maintenance, connection to improper voltage supply, or attempted repair by anyone other than a facility authorized by Bittium to service this Tough Mobile 2.

Question:
Can the product warranty be extended?
Answer:
Yes, private and public organizations can purchase Extended Warranty for additional 12-36 months. Please contact us for more information.

Question:
How do I update the software on my Tough Mobile 2?
Answer:
All Tough Mobile 2 updates are delivered Over-The-Air (OTA). The device will check the availability of software updates automatically and inform you when an update is available. You can decide when to download and install the software update.
To manually check the availability of updates from your Tough Mobile 2, go to Settings → System → Advanced → System Updates → Check now.

Question:
How can I change the battery?
Answer:
Bittium offers a replacement service if there is a need to replace the battery. Distributors and partners, please visit the Bittium Tough Mobile Support Portal for Partners to submit service requests. If you do not have an account for the Support Portal, please fill the Bittium Tough Mobile Support Request Form to make your service request.

Question:
Who can I contact for product support and maintenance?
Answer:
Please first read through all the FAQ and Support information on the Tough Mobile 2 webpage.
If your problem is not solved, distributors and partners please visit the Bittium Tough Mobile Support Portal for Partners to submit error reports, support requests, service requests, and feature requests. If you don’t have an account for the Support Portal, please fill the Bittium Tough Mobile Support Request Form to make your support request.