Customer-owned signing key
Each self-hosted Management deployment should create and keep its own Android signing identity. The official MediaHub private signing key is not distributed with Management.
Back up the generated signing key and password securely. Android requires updates to an installed package to be signed with the same identity.
APK builder
The Management image contains the managed MediaHub app engine. When you build an app, Management combines the deployment bootstrap and configured APK artwork with that known template, then uses Android build tools to align and sign the generated APK.
What is embedded
The generated APK needs the Management endpoint and deployment credential so it can retrieve authenticated configuration. The current provider DNS remains server-side and is delivered dynamically rather than being used as the app's user-entered login field.