Important

Parents, carers, children and young people

Parents, carers, children and young people cannot apply for laptops, tablets or internet access. You should contact your school, college or further education institution for help accessing remote education.

Enrol Chromebooks and add Cisco Umbrella with user logins

Find out how to enrol Google Chromebooks so you can manage them remotely, and how to add Cisco Umbrella to make them secure for families and children who are associated with a school.

Contents

Create an organisational unit for these devices

Create an organisational unit called ‘DfE Devices’ in your Google Admin Console.

Enrol your Chromebooks

Before you enrol your devices, ensure that you have the correct number of Chrome licenses available in your domain by going to ‘Devices’ > ‘Chrome devices’ and clicking the ‘Upgrades’ button in the top right. If you do not have enough licenses for the number of devices you need to enrol and manage, contact us.

Follow these instructions to enrol your devices:

  1. Unbox multiple devices and turn on
  2. Connect to WiFi
  3. On login screen press ‘ctrl’ + ‘alt’ + ‘e’ (or click ‘More options’ > ‘Enterprise Enrollment’)
  4. Enter credentials on enrollment screen (use credentials from an account on your domain)
  5. Wait for ‘Your Chromebook has been successfully enrolled’ and click ‘Next’

Deploy Cisco Umbrella on your Chromebooks

The content below is taken from the Cisco Umbrella Client Deployment Guide and has been abbreviated for the purpose of this deployment.

Installation Guide

There are 3 parts to this installation:

  1. Installing the Cisco Umbrella Chromebook client extension on your Chromebooks
  2. Installing the Cisco Umbrella Chromebook client application on your Chromebooks
  3. (Optional) Installing Cisco Umbrella Root CA

Details of the JSON configuration needed to install Cisco Umbrella Chromebook client application are available in the Support Portal. Search for ‘Cisco Umbrella’ within the ‘How do I’ section.

You can also also find instructions for removing Umbrella Chromebook software in the last section of this guide.

Prerequisites

The Cisco Umbrella Chromebook client uses the ports below. make sure that:

Part 1: Install the Cisco Umbrella Chromebook Client Extension

  1. Log into https://admin.google.com.

    Google Admin Console

  2. Select Devices.

    Device Management

  3. In the menu on the left-hand side of the Device Management window, select Chrome management.

    Select ‘Chrome Management’

  4. In the Chrome Management window, select Apps & extensions.

    Select ‘Apps and Extensions’

  5. Click ‘Users and Browsers’ and if applicable, select the relevant OU from the left-hand side.

  6. Click the yellow + icon in the bottom right-hand corner and choose ‘Add the Chrome app or extension by ID’ option to search for the ID of the Cisco Umbrella Chromebook client extension jcdhmojfecjfmbdpchihbeilohgnbdci (searching by name will not work.)

    Yellow icon for ‘Add the Chrome App or Extension by ID’ Add the extension by ID

  7. Select Force install. This ensures that Chromebook users in the selected Organization Unit cannot remove or disable the extension.

  8. Select Save (top-right) if necessary. You have finished installing the Cisco Umbrella Chromebook client extension. Proceed with the next section to install the Cisco Umbrella Chromebook client application.

Part 2: Install the Cisco Umbrella Chromebook Client Application

  1. Repeat the process of adding an app or extension by ID

    Screenshot showing locally added App Yellow icon for ‘Add the Chrome App or Extension by ID’

  2. Search for the ID of the Cisco Umbrella Chromebook client application cpnjigmgeapagmdimmoenaghmhilodfg (Searching by name will not work.)

  3. Select Force install. This ensures that Chromebook users in the selected Organization Unit cannot remove or disable the application.

  4. Find the JSON configuration to enter into the ‘Policy for extensions’ box in the Support Portal. Search for ‘Cisco Umbrella’ within the ‘How do I’ section.

    Screenshot showing locally added App

  5. Select Save (top right). You have finished installing the Cisco Umbrella Chromebook client application.

Part 3 (Optional) Installing Cisco Umbrella Root CA

Cisco Umbrella highly recommends the following:

  • In order to avoid certificate errors when accessing the block page, you must install the Cisco Umbrella root certificate on your Chromebooks. For more information on how to deploy certificates, see Google’s documentation and use the attached Root CA to be uploaded.

The Umbrella root certificate to link your device to the DfE block page can be downloaded from https://bit.ly/2zr2gM8

Follow these instructions to deploy the Cisco Umbrella Root CA to your Chrome devices:

  1. Head to https://admin.google.com.
  2. Click Devices.
  3. On the left, click Networks.

  4. Click Certificates > Create certificate.

    Click ‘Create Certificate’

  5. Give the certificate a name

  6. Choose the certificate file to upload and click Upload.

  7. In the ‘Certificate authority’ section click ‘Chromebook’

    Select ‘Chromebook’

  8. Click ‘Add’ to confirm.

  9. After installing the browser extension and Application for the first time, test it by going to internetbadguys.com on the Chromebook. A Cisco Umbrella filtering page should appear. It may take a number of minutes after installing the browser extension and app before the blocking comes into effect.

Removing the Umbrella clients from the Chrome Devices

If you remove Cisco Umbrella then you are responsible for providing alternative safety software.

To remove Cisco Umbrella from your Chrome devices, follow the instructions below:

  1. Follow steps 1 to 5 from part 1 of this guide

  2. Click on both the app and extension, then click the bin icon in the right-hand sidebar.

    Screenshot showing Force Install

Next

Enrol Chromebooks and add Cisco Umbrella with no user logins

Previous

Safeguarding for device users