Support for Chrome OS

Content

Note: This feature requires a Chrome for Enterprise license from Google. Click here or contact Google for more information. For a simplified explanation of the license please see this Google brief.

IBM MaaS360 announces a partnership with Google to manage Chrome OS devices alongside other endpoints in an enterprise from a single unified management solution. With this support, administrators can easily enroll Chromebooks into the MaaS360 portal through the Google admin console. MaaS360 also leverages Google APIs to allow the administrators to enforce security policies on Chrome OS devices.

Note: If both Android Enterprise and Chrome are enabled, it will result in a clash between Android and Google user IDs and administrators cannot distribute apps to users. MaaS360 recommends not enabling both AE and Chrome on the same customer.

To enroll a Chromebook, follow the procedure.

Configure the Google Admin Console

Checking Chrome License

1. Log in to Google Admin console.
2. Open menu from the top left icon.
3. Go to Devices > Chrome > Devices.
4. Click Upgrades.
5. Verify the license.

Enable Chrome Management API

1. Go to https://console.cloud.google.com/.
2. Expand the menu icon from the top left of the screen and click API & Services.
3. Search for Chrome Management API.
4. Enable Chrome Management API.

Adding Scope

1. Log in to Google Admin console.
2. Expand the menu icon from the top left and go to Security > Access and Data Control > API Controls.
3. Under Domain wide delegation, click Manage Domain wide delegations.
4. Click Add New.
5. Add the following details.

• Client ID: Contact the MaaS360 support team to get the client ID.
• OAuth Scopes
  • https://www.googleapis.com/auth/chromedevicemanagementapi
  • https://www.googleapis.com/auth/admin.directory.user
  • https://www.googleapis.com/auth/admin.directory.device.chromeos

Adding users in Google Admin Console – Used to enroll chrome devices

1. Log in to Google Admin console.
2. From the top left menu, select Directory and click Users.
3. Add new user. Provide all details and set a password.

Enabling Chrome Management in the IBM MaaS360 Portal

1. Enable Chrome Management CP. Please note that the Android Enterprise should not be setup in the account where Chrome Management setup must be done.
2. Log in to IBM MaaS360 Portal.
3. Go to Services > Mobile Device Management.
4. Under Chrome Management, provide the admin email that is used to log in to the Google Admin console.
5. Click Save.

Enrolling Chrome Device

1. Turn on the Chrome device. Ensure that the device is in factory reset state.
2. Connect wifi.
3. Log in with the user credentials which was created in the admin console and wait until the device is displayed under Devices > Chrome > Devices.
4. The device is displayed in the IBM MaaS360 Portal within 24 hours.

Support for Chrome policies

MaaS360 leverages Google APIs to give the administrators Chrome OS policy management capabilities across their devices and users. In the first phase of series of enhancements, MaaS360 adds support for the following policies.

Chrome User Policies

1. Browser Settings - URL Allow List, URL Block List, Managed Bookmarks, Folder Path, Incognito Mode

2. Device Settings - Configure AC power Settings, Configure Battery Power Settings, Reset Power Policy

Configure ONC Settings

1. Chrome Device Policies - Device Settings, SAML Settings, Sign in Policies, Kiosk Settings, ONC Settings

2. Support for App Management - Ability to distribute both Chrome and Android Apps.