ChromeOS management

Chrome OS support in BigFix Mobile and Modern Client Management enables organizations to centrally manage enterprise ChromeOS devices using the same unified endpoint management framework used for other supported platforms. Through integration with Google Workspace (Chrome Enterprise), administrators can securely enroll Chrome OS devices, apply policies, perform remote actions, and monitor device health from the BigFix WebUI.

This feature extends BigFix’s MDM capabilities to Chrome OS, providing visibility and control over enrolled devices, enforcing security and configuration policies, and simplifying device lifecycle management while leveraging Google’s native Chrome OS management infrastructure.

It enables administrators to enroll, monitor, configure, and manage Chrome OS devices alongside other supported platforms. This capability allows centralized policy enforcement, device lifecycle management, and compliance control within a unified management interface.BigFix Mobile, the Enterprise Mobility Management (EMM) solution, is integrated with Android Enterprise. With this solution, you can effortlessly enroll and manage ChromeOS devices.

Chrome OS support includes:

  • Service installation and enablement
  • Device enrollment and lifecycle actions
  • Policy creation and deployment
  • Health monitoring
  • Policy grouping for simplified management

Prerequisites

Before managing Chrome OS devices in BigFix Mobile and Modern Client Management, ensure:
Environment
  • BigFix Mobile and Modern Client Management with WebUI access.
  • Google Workspace (Chrome Enterprise) subscription.
Accounts
  • Google Workspace admin with Chrome device privileges.
  • Enterprise service account JSON key for Chrome Management APIs.
  • BigFix Master Operator access.
Infrastructure
  • MDM Server host with BigFix Agent installed.
  • TLS certificates for secure communication.
  • Outbound TCP 443 access to Google APIs.
Devices
  • New or factory-reset Chrome OS devices in the organization’s Google Workspace domain.
  • Active internet connection for enrollment.
Validation
  • Pre-configuration in Google Workspace complete.
  • Run prerequisite scan from BigFix WebUI.

Quick start

  • Configure Google Enterprise in BigFix
  • Prepare Google Admin Console
  • Install and set up
  • Create ChromeOS Policy in BigFix
  • Start Enterprise Enrollment on the ChromeOS Device and Verify Enrollment
  • ChromeOS Device Policy Management
  • Managing Chrome OS devices through actions
  • Monitoring and Health Checks
  • Troubleshooting
  • Frequently Asked Questions (FAQ)

Chrome OS Service Installation

Chrome OS management must first be enabled within BigFix MCM. Depending on the deployment scenario, administrators can either install the service during initial setup or add it to an existing environment.

Enroll to Managed Google Play Accounts enterprise

Supported Policies

Managing Chrome OS Devices Through Actions

Perform remote management actions such as restart, wipe, remote powerwash, and unenroll directly from the BigFix WebUI.
Supported actions
Action What it does Use case Effect on user data
Restart Remotely restarts the Chrome OS device. Needed after policy changes, software updates, or troubleshooting. None; device restarts without data loss.
Wipe - Wipe all users off Removes the logged in user profile from the Chrome OS device Employee leaves or changes roles, but the device remains in use. Only that user’s data and settings are erased.
Wipe - Remote Powerwash Triggers a factory reset remotely, similar to wiping, via the Chrome Management API. Device needs to be reset without physical access. All local data and accounts are removed; device returns to factory reset state.
Unenroll Removes the device from BigFix and Google Workspace management. Device is leaving the organization or being transferred to a different admin domain. Device stays functional, but user data, management policies, monitoring, and actions are removed.