Category filter
Enroll Google Chrome for Chrome Browser Cloud Management
Chrome Browser Cloud Management (CBCM) is an offering by Google, which enables the centralized management of Chrome browser settings and policies across enterprise devices. Using CBCM, admins can deploy policies, block suspicious extensions, view reports and much more on Chrome browsers across your deployed devices as a means to ensure safe and secure browsing.
With the help of Hexnode, you can enroll cloud-managed Chrome browsers on your devices with a handful of steps. Once completed, you can use your organization’s Google Admin console to manage all the enrolled browsers.
Step 1: Sign up for Chrome Browser Cloud Management
- Using the administrator credentials, log in to the Google Admin console.
- In the sidebar, navigate to Billing > Subscriptions.
- Click on Add or upgrade a subscription.
- On the left, click on Devices.
- Under Chrome Browser Cloud Management, click on Get Started.
- Review your selection and click on Checkout.
- Click on Place Order.
Step 2: Generate enrollment token
- In the Admin console sidebar, navigate to Devices > Chrome > Managed browsers.
- At the top, click on Enroll.
- Click on Copy enrollment token to clipboard icon.
- Click on Done.
Store the enrollment token on your device. The token will be later required to enroll Chrome browsers.
Step 3: Enroll Chrome browsers using the enrollment token
- Download the below code.
12345678910111213141516171819202122<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>CloudManagementEnrollmentToken</key><string>XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX</string><key>CloudManagementEnrollmentMandatory</key><true/><key>PayloadEnabled</key><true/><key>PayloadDisplayName</key><string>Chrome Browser Settings</string><key>PayloadIdentifier</key><string>com.google.Chrome.23C34886-E28B-4C6D-A26F-B50531C8EB3F</string><key>PayloadUUID</key><string>57DFA6B0-466A-446B-B875-5803B149DB9E</string><key>PayloadType</key><string>com.google.Chrome</string><key>PayloadVersion</key><integer>1</integer></dict></plist>
- Open the downloaded file in a text editor. Replace
XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
with the enrollment token generated in Step 2. - Save the file with the extension .xml.
- Navigate to the Apps tab.
- Search and click on the Google Chrome app on the inventory.
- Click on the settings (gear) icon on the top right of the app details box. Then, select the App Configuration option.
- Check the App Update Configuration box and upload the XML file that you previously saved.
- Click on Save.
On your Hexnode portal,
Follow the above steps to enroll the iOS devices onto Google Admin console where you can manage Chrome browser. Once done, all you now need is to distribute this app to the target iOS/iPadOS devices.
- Download the below code.
12345678910111213141516171819202122<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"><plist version="1.0"><dict><key>CloudManagementEnrollmentToken</key><string>XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX</string><key>CloudManagementEnrollmentMandatory</key><true/><key>PayloadEnabled</key><true/><key>PayloadDisplayName</key><string>Chrome Browser Settings</string><key>PayloadIdentifier</key><string>com.google.Chrome.5F15308F-877A-4F25-916B-948E771D8128</string><key>PayloadUUID</key><string>8EBD3676-7C77-4FEE-9E78-C00EA0A0B5C3</string><key>PayloadType</key><string>com.google.Chrome</string><key>PayloadVersion</key><integer>1</integer></dict></plist>
- Open the downloaded file in a text editor. Replace
XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
with the enrollment token generated in Step 2. - Save the file with the extension .xml.
- Navigate to the Policies tab.
- Choose an existing policy or create a new policy by clicking on New Policy.
- Provide a suitable name for the policy if the New Policy option is chosen.
- Select App Configurations from macOS > App Management.
- Select Configure option and then click on the + Add New Configuration button.
- Search and choose the Google Chrome app.
- Upload the previously downloaded XML file by clicking on Choose File option.
- Go to the Policy Targets tab and select the devices or device groups on which you want to enroll Chrome browsers.
- Click on Save.
On your Hexnode portal,
Follow the above steps to enroll the macOS devices onto Google Admin console where you can manage Chrome browser.
- Navigate to the Policies tab.
- Choose an existing policy or create a new policy by clicking on New Policy.
- From Android > App Management, select App Configurations, and click on Configure.
- Click on Add new configuration > Search and select Google Chrome app.
- On the Configure Applications window, provide the enrollment token generated in Step 2 for the field The enrollment token of cloud policy.
- Click on Done.
- Click on Add.
- Go to the Policy Targets tab and select the devices or device groups on which you want to enroll Chrome browsers.
- Click on Save
Follow the above steps to enroll the Android devices onto Google Admin console where you can manage Chrome browser.
- Download the below code.
123456789101112131415161718$token = "XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX"try{$path = 'HKLM:\SOFTWARE\Policies\Google'if(-not (Test-Path $path)){$status = New-Item -Path 'HKLM:\SOFTWARE\Policies' -Name 'Google'}$path = 'HKLM:\SOFTWARE\Policies\Google\Chrome'if(-not (Test-Path $path)){$status = New-Item -Path 'HKLM:\SOFTWARE\Policies\Google' -Name 'Chrome'}$status = Set-ItemProperty -Path $path -Name "CloudManagementEnrollmentToken" -Value $tokenWrite-Host "Execution successfully completed"}catch{Write-Output $_.Exception.Message}
- Replace
XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX
with the enrollment token generated in Step 2. - Save the file with the extension .ps1.
- Navigate to Manage > Devices.
- Select the Windows devices on which you want to enroll Chrome browsers.
- Click on Actions > Execute Custom Script.
- Choose the platform as Windows.
- Choose the script file source as Upload file.
- Upload the previously downloaded .ps1 file.
- Click on Execute.
On your Hexnode portal,
Follow the above steps to enroll the Windows devices onto Google Admin console where you can manage Chrome browser.
Step 4: Check for enrollment completion
Once the enrollment process is completed, the user must quit and relaunch the app. You can confirm the enrollment from the admin console.
Once the browsers are enrolled, you can use features available in the admin console to manage the Chrome browser.