In this article

This article provides steps to deploy the Google Chrome Extension Roaming Client to managed Chromebook devices. 

The Extension is a browser-based endpoint agent designed to prevent circumvention software on managed Chromebooks. The Chrome Extension offers the same granular reporting and off-network protections as our other Roaming Clients. 

The Chrome Extension also supports Chromebook-compatible Mobile Device Management (MDM) deployment to easily filter and protect from these devices. 

Limitations

• Devices must be managed in order to run DNSFilter's Chrome Extension
  • Unmanaged devices can easily circumvent or remove the extension and do not send information to DNSFilter
• The Chrome extension is tested with G Suite deployments but can be deployed with other MDM platforms. Check your MDM's support documentation for capabilities and limitations
• Yandex SafeSearch is blocked by the Chrome Extension because it can't enforce filtered searches 

Environment Preparation

Preparing your network environment for deployment can prevent errors, misconfigurations, and internet connectivity issues. Complete these steps to set yourself up for success.

• Set the Device Network Hostname Template for the enrolled devices. This prevents the devices from loading as "[blank]" in the DNSFilter dashboard, ensuring the correct device name and client registration populate on the dashboard
• Enable manifest V2 extensions in the Google admin console to avoid issues. This option is under Devices > Settings > Chrome > Users & Browsers in the console

Install Chrome Extension Roaming Client

These steps use the Google Admin Dashboard, but other MDM's use a similar extension setup.  

1. Login to admin.google.com and navigate to Devices
   1. Select Chrome
   2. Select Apps & Extension
2. Select the Organizational Unit (OU) of users to manage the extension
3. Select Add (➕)
4. Select Add Chrome Extension by ID
5. Select From Customer URL 
6. Enter the following Extension ID and Custom URL:
   

   Extension ID: ahailcbfmbjeilfjapehbjlclkeffojh
   Custom URL: https://chromeupdate.dnsfilter.com/chrome-extension/updates.xml

7. Select Save. The OU is now added
8. Select the Installation Policy
9. Set it to Force Install
10. Under Policy for Extensions, enter this JSON (replace "YOUR-SITE-KEY-HERE" with your site key) 
    

    {"siteKey":{"Value":"YOUR-SITE-KEY-HERE"}}

11. Select Save

The installation is now complete. When a user in the Organizational Unit logs into their Chromebook the extension will force-install and register with the site. 

Having issues? See the Chrome Extension Troubleshooting article to address common blocks.