Enrolling ChromeOS devices

During device enrollment, a device is enrolled to BigFix Mobile and deployed with the policies from the associated policy group.Enterprise enrollment is the official method to enroll a ChromeOS device into an organization’s MDM server. During this process, the device is registered with the organization’s Google Workspace domain and becomes managed by the MDM server. After enrollment, the MDM server can apply security policies, configure settings, and manage applications on the device.

Prerequisites

Before you begin, ensure that:

  • The MDM server is integrated with Google Enterprise / Chrome Management.
  • You have access to the Google Admin Console.
  • You have an enrollment account with Chrome device administrator privileges.
  • The ChromeOS device is:
    • New, or
    • Factory reset (Powerwashed).
  • The device is connected to the internet (Wi-Fi or Ethernet).
  • The device is assigned to your organization’s domain (manually or by reseller).
Note: With MCM v3.5, Chrome OS devices are enrolled using Google Workspace authentication.
  • No separate enrollment screen is available within BigFix, unlike other operating systems.
  • Enrollment is initiated directly from the device.
  • LDAP, Azure AD, or other third-party authentication are not supported at this time.
This ensures devices are integrated with BigFix and Google Workspace seamlessly during setup.

Enrollment work flow

Step 1: Power on the ChromeOS Device
  1. Turn on the ChromeOS device.
  2. Select the language and keyboard layout.
  3. Connect the device to a Wi-Fi network.
Step 2: Open the Enterprise Enrollment Screen
  1. At the ChromeOS sign-in screen, press: Ctrl + Alt + E
  2. The Enterprise Enrollment screen is displayed.
Step 3: Sign in with the Enrollment Account
  1. Enter the credentials of the enterprise enrollment account associated with your Google Workspace domain.
  2. Complete the sign-in process.
Step 4: Device Enrollment into BigFix
  1. ChromeOS registers the device with the organization’s domain.
  2. The device is automatically synchronized to the BigFix MCM server.
  3. A confirmation message appears when enrollment is successful.
Step 5: Verify Enrollment in BigFix
  1. Log in to the BigFix MCM Admin Console.
  2. Go to Devices.
  3. Confirm that the ChromeOS device is listed with a Managed status.

Result

After successful enrollment:

  • The ChromeOS device is managed by BigFix Mobile (MCM).
  • Device policies and configurations are applied from BigFix.
  • Applications can be deployed and controlled.
  • Administrators can remotely lock, wipe, or disable the device.
Note:
  • Enterprise enrollment requires the device to be factory reset before starting.
  • Personal Google accounts cannot be used for enrollment.
  • If forced re-enrollment is enabled, users cannot remove BigFix management from the device.