ChromeOS Auto-Enroll Kit

Welcome to the Georgia Public Library Service (GPLS) ChromeOS Auto-Enroll Kit page. ChromeOS auto-enrollment is a feature for administrators to automatically enroll devices in their organization's management without manual user input. This kit uses specialized USB drives to emulate the manual enrollment process, allowing the user to plug the drive into a new Chrome device, sit back, and watch the device enroll itself - even logging on to the WiFi to retrieve updates and assigning location or asset information.

How Automated ChromeOS Enrollment Works (Three Main Methods) 

1. Zero-Touch Enrollment (ZTE):

Devices purchased through an authorized reseller or manufacturer are pre-registered to the organization's Google Admin domain using their serial numbers and a pre-provisioning token. When the end-user powers the device on and connects it to the internet, it automatically identifies the domain and enrolls. Alternatively, when enrolling new Flex devices you can embed a zero Touch Enrollment token into the installer drive to auto enroll the device (only works for ChromeOS Flex).

2. White Glove Enrollment: 

Certain resellers may offer enrollment solutions such as "White Glove" Enrollment (CDWG), where the reseller powers the unit on, updates it, verifies there is no damage and the device is operating normally, then enrolls the device into the correct ChromeOS Admin console. The device can also be moved toa  specific Organizational Unit, and have Asset, Location, or Note information input. The device is then repackaged in the OEM box and sent to the purchaser - ready to go.

3. Physical Automation Solutions:

Third-party hardware and software solutions that physically or digitally automate the steps of the manual enrollment process for a large number of devices at once, such as automatically entering credentials via a connected device or USB drive. This is the method used by the GPLS-provided ChromeOS Auto-enroll kit. 

Instructions:

The kit contains two (2) USB drives that operate similarly to a "Rubber Ducky." Rubber Ducky USB drives are used for automating scripts and payload delivery upon insertion of a drive into a computer. This means you can pre program a series of steps that the machine will take, save the program, then plug it into a target machine. When the drive is inserted, it will run the script or execute the mouse clicks or keyboard presses you defined. The kit drives use simple programming language to automate operation of am emulated virtual keyboard attached to the target Chrome device, walking through the enrollment process. Once you record the steps needed on a test device, you can save those steps to the USB drive, set the payload to automatically run when plugged in, turn on the next Chrome device, and plug the drive in. The drive will immediately start running the payload and will walk through the steps you defined to enroll the Chrome device. With two devices running at once, and an average payload execution time of just a few minutes, you can quickly enroll a fleet of devices without having to manually go through the process for every single device.

Video Tutorials and Resources

• Zero-touch enrollment step-by-step guide: Watch here. 

• Automatically enroll ChromeOS Flex devices: Read here. 

• Manual enrollment: Read here.