Chromebook Auto Enrollment via Google Admin

📘

Make sure to select Google Workspace as the identity provider while setting up NetID Web Portal.

After setting up the NetID Web Portal in Foxpass, we can proceed to Chromebook Auto enrollment process.

1. Download ChromeOS Config

• Click on the Download ChromeOS Config option on the BYOD page after clicking the settings button. The texts in the download will be used for Policy for extensions in the following Google Admin Console.

2. Configure Splashtop NetID Extension in Google Admin console.

1. Navigate to Devices -> Chrome → App & Extensions.

2. In the User & browsers tab, click “+” (bottom right corner), and click “Add from Chrome Web Store”.

3. In the pop-up dialog, search “Splashtop NetID” to select the Splashtop NetID app.

4. Select the app. Click 'Select' button.

5. Allow Force install +pin browser toolbar.

5. Enable “Allow access to keys” under the the Certificate management. Click the 'Save' button.

6. Scroll below, and add JSON configuration file downloaded in the Step 1 under the “Policy for extensions“. Click 'Save' button.

3. Configure Certificates in Google Admin console

1. Download the Active Server CA from Foxpass EAP-TLS page.

2. In the Google admin console, navigate to Devices ->Networks, click “Add Certificate“. “UPLOAD” the server certificate downloaded in step 1 above, and check the option for Chromebook. Click the 'Add' button.

4. Configure Wi-Fi in Google Admin console

1. In the Google admin console, navigate to Devices > Networks > Wi-Fi > Add Wi-Fi.
2. Check both Chromebooks(by user) and Chromebooks(by device) under Platform access.

3. Details:
   1. Name : Your choice
   2. SSID: Your SSID configured in your access point
   3. Check Automatically Connect.
   4. Security Type: WPA/WPA2 Enterprise(802.1X)
   5. Extensible Authentication Protocol: EAP-TLS
   6. Username: ${LOGIN_EMAIL}
   7. Server Certificate Authority: Select the Server CA uploaded earlier.
   8. Click the 'Save' button.

5. Set up the chromebook

You can enroll chromebook for Personal use. Once enrolled, you can go to chrome://certificates to see the user certificate issued by foxpass. If everything is configured correctly in Google admin, your chromebook will be connected to your SSID.