Enrol Chromebooks and add Cisco Umbrella with user logins
Find out how to enrol Google Chromebooks so you can manage them remotely, and how to add Cisco Umbrella to make them secure for families and children who are associated with a school.
Create an organisational unit for these devices
Create an organisational unit called ‘DfE Devices’ in your Google Admin Console.
Enrol your Chromebooks
Before you enrol your devices, ensure that you have the correct number of Chrome licenses available in your domain by going to ‘Devices’ > ‘Chrome devices’ and clicking the ‘Upgrades’ button in the top right. If you do not have enough licenses for the number of devices you need to enrol and manage, contact us.
Follow these instructions to enrol your devices:
- Unbox multiple devices and turn on
- Connect to WiFi
- On login screen press ‘ctrl’ + ‘alt’ + ‘e’ (or click ‘More options’ > ‘Enterprise Enrollment’)
- Enter credentials on enrollment screen (use credentials from an account on your domain)
- Wait for ‘Your Chromebook has been successfully enrolled’ and click ‘Next’
Deploy Cisco Umbrella on your Chromebooks
The content below is taken from the Cisco Umbrella Client Deployment Guide and has been abbreviated for the purpose of this deployment.
There are 3 parts to this installation:
- Installing the Cisco Umbrella Chromebook client extension on your Chromebooks
- Installing the Cisco Umbrella Chromebook client application on your Chromebooks
- (Optional) Installing Cisco Umbrella Root CA
Details of the JSON configuration needed to install Cisco Umbrella Chromebook client application are available in the Support Portal. Search for ‘Cisco Umbrella’ within the ‘How do I’ section.
You can also also find instructions for removing Umbrella Chromebook software in the last section of this guide.
The Cisco Umbrella Chromebook client uses the ports below. make sure that:
- Port 53 (UDP) is accessible to 220.127.116.11 and 18.104.22.168 on your firewall
- https://registration.polaris.qq.opendns.com is accessible from your device
Part 1: Install the Cisco Umbrella Chromebook Client Extension
Log into https://admin.google.com.
In the menu on the left-hand side of the Device Management window, select Chrome management.
In the Chrome Management window, select Apps & extensions.
Click ‘Users and Browsers’ and if applicable, select the relevant OU from the left-hand side.
Click the yellow + icon in the bottom right-hand corner and choose ‘Add the Chrome app or extension by ID’ option to search for the ID of the Cisco Umbrella Chromebook client extension jcdhmojfecjfmbdpchihbeilohgnbdci (searching by name will not work.)
Select Force install. This ensures that Chromebook users in the selected Organization Unit cannot remove or disable the extension.
Select Save (top-right) if necessary. You have finished installing the Cisco Umbrella Chromebook client extension. Proceed with the next section to install the Cisco Umbrella Chromebook client application.
Part 2: Install the Cisco Umbrella Chromebook Client Application
Repeat the process of adding an app or extension by ID
Search for the ID of the Cisco Umbrella Chromebook client application cpnjigmgeapagmdimmoenaghmhilodfg (Searching by name will not work.)
Select Force install. This ensures that Chromebook users in the selected Organization Unit cannot remove or disable the application.
Find the JSON configuration to enter into the ‘Policy for extensions’ box in the Support Portal. Search for ‘Cisco Umbrella’ within the ‘How do I’ section.
Select Save (top right). You have finished installing the Cisco Umbrella Chromebook client application.
Part 3 (Optional) Installing Cisco Umbrella Root CA
Cisco Umbrella highly recommends the following:
- In order to avoid certificate errors when accessing the block page, you must install the Cisco Umbrella root certificate on your Chromebooks. For more information on how to deploy certificates, see Google’s documentation and use the attached Root CA to be uploaded.
The Umbrella root certificate to link your device to the DfE block page can be downloaded from https://bit.ly/2zr2gM8
Follow these instructions to deploy the Cisco Umbrella Root CA to your Chrome devices:
- Head to https://admin.google.com.
- Click Devices.
- On the left, click Networks.
Click Certificates > Create certificate.
Give the certificate a name
Choose the certificate file to upload and click Upload.
In the ‘Certificate authority’ section click ‘Chromebook’
Click ‘Add’ to confirm.
After installing the browser extension and Application for the first time, test it by going to internetbadguys.com on the Chromebook. A Cisco Umbrella filtering page should appear. It may take a number of minutes after installing the browser extension and app before the blocking comes into effect.
Removing the Umbrella clients from the Chrome Devices
If you remove Cisco Umbrella then you are responsible for providing alternative safety software.
To remove Cisco Umbrella from your Chrome devices, follow the instructions below:
- Follow steps 1 to 5 from part 1 of this guide
Click on both the app and extension, then click the bin icon in the right-hand sidebar.
Enrol Chromebooks and add Cisco Umbrella with no user logins
Safeguarding for device users