Chrome Enterprise: Getting started with zero-touch enrollment for Chrome OS
Chrome Enterprise: Getting started with zero-touch enrollment for Chrome OS
With zero-touch enrollment, IT departments can drop ship Chrome OS devices that will automatically enroll into enterprise administration as soon as the end user connects to the internet. This video shows how to set up zero-touch enrollment and walks through how to generate pre-provisioning tokens tokens from the Google Admin console.
Before you get started, please note that Zero-touch enrollment requires three things:
- A zero-touch enrollment-capable device
- A pre-provisioning token from the Google Admin console
- And a pre-provisioning partner who offers zero-touch enrollment service.
Watch the video to learn more, or visit the help center: https://support.google.com/chrome/a/a…
Content
1.37 -> [Music]
6 -> in this video
6.96 -> we'll explain how to use zero touch
8.88 -> enrollment for chrome os devices
11.04 -> which is an alternative to manual
12.88 -> enrollment of devices
14.719 -> with zero touch enrollment an approved
16.72 -> pre-provisioning partner
18.08 -> such as select device manufacturers
20.32 -> distributors or resellers
22.32 -> sends instructions to google to
23.84 -> automatically enroll a compatible chrome
25.84 -> os device into a customer's domain
28.32 -> after that device is turned on and
30.08 -> connected to the internet
31.92 -> zerotouch enrollment requires three
34.079 -> things
34.96 -> a zerotouch enrollment capable device a
38.079 -> pre-provisioning token from the google
39.92 -> admin console
41.52 -> and a pre-provisioning partner who
43.36 -> offers zero touch enrollment service
45.92 -> let's begin by creating a
47.28 -> pre-provisioning token
49.84 -> from the google admin console click on
52.079 -> devices
53.6 -> then select the chrome devices tile now
56.559 -> choose the ou that you want to
58.079 -> pre-provision devices into
60.32 -> you can create a pre-provisioning token
62.48 -> for each one of your organizational
64.239 -> units
64.799 -> which lets you choose where devices get
66.64 -> enrolled once they go through zero touch
68.56 -> enrollment
70 -> for example if you want some devices to
72.64 -> be enrolled into the enrollment
74.159 -> organizational unit
75.6 -> you can create separate pre-provisioning
77.52 -> tokens for each of these units
80.08 -> note that a pre-provisioning token can
82 -> be used on multiple devices and orders
84.24 -> until the token is revoked
86.479 -> to create the token select the
88.479 -> organizational unit you want to create a
90.56 -> token for
91.92 -> click on the yellow pre-provisioning
93.6 -> token button in the bottom corner
95.92 -> you'll see that a pre-provisioning token
97.759 -> has not been generated for this ou
100.4 -> select generate token a 30 character
103.439 -> token has now been created
105.759 -> now that you have created your
107.04 -> pre-provisioning token you have three
109.2 -> options
110.32 -> first you can copy the pre-provisioning
112.479 -> token to the clipboard
114.32 -> this is useful if you need to email it
116.24 -> to a reseller account manager
118 -> or a deployment partner second if you
120.719 -> just want to stop using this token
122.799 -> for example when you change partners and
124.96 -> you no longer want some partners to have
126.96 -> access to this token
128.08 -> to be able to enroll devices you can
130.399 -> revoke it and regenerate it
132.72 -> third you can revoke your token if you
135.28 -> no longer need a pre-provisioning token
137.28 -> for this organizational unit
139.12 -> simply revoke it the generate token
142.16 -> button
142.64 -> only appears the first time when a
144.239 -> pre-provisioning token is not present
146.239 -> for an organizational unit
148.64 -> once that pre-provisioning token and
150.4 -> domain name are sent to the
151.68 -> pre-provisioning partner
153.2 -> they will send that information along
155.04 -> with the device information
156.56 -> to google through an api once received
159.68 -> devices in your admin console will now
161.84 -> show a new status called pre-provisioned
164.56 -> previously we offered devices in
166.64 -> provisioned de-provisioned
168.48 -> disabled or suspended statuses matching
171.44 -> all the different actions that you can
172.879 -> take on your domain
174.879 -> now all the devices that a partner has
177.28 -> pre-provisioned for your domain
178.959 -> will show in these organizational units
180.959 -> as pre-provisioned status
184.56 -> to learn more visit the google chrome
186.72 -> help center
Source: https://www.youtube.com/watch?v=MShaIp6tw5I