Product Updates

Hey friends,   We are pleased to announce the release of Google’s Security Technical Implementation Guide (STIG) for Android 16.Developed in partnership with the Defense Information Systems Agency (DISA), this guide provides a robust, expert-defined security baseline for organizations that require the highest level of security. It is an essential resource for government, defense, and security-conscious customers like FSI and Healthcare, who handle sensitive data and operate in compliance-driven environments.What is a STIG?A STIG is a detailed security checklist designed to “harden” an operating system.In short, it’s a technical manual that provides prescriptive, step-by-step guidance on how to adjust default settings, disable unnecessary functions, and configure a system to protect against  common vulnerabilities. By following a STIG, you proactively close the doors that cyber attackers often use to exploit systems.Who can benefit from the STIG?While STIG compliance is mandatory for DoD (Department of Defense) and federal agencies, its guidance represents the gold standard for security that any organisation can use to improve its security posture.Specifically, the Android 16 STIG provides official configurations for devices deployed in Corporate-owned, business-only (COBO), and Corporate-Owned, Personally-Enabled (COPE) management modes.The key value for your businessAdopting the Android 16 STIG goes beyond meeting a mandate, enabling several key business benefits. Achieve the highest security posture: The guide closes configuration weaknesses and minimizes your system’s attack surface, dramatically improving your defence against threats and enhancing system resilience. Ensure mandatory compliance: For federal and DoD-connected systems, STIG compliance is a non-negotiable step to meet the Risk Management Frameworks (RMF) and gain Authority to Operate (ATO). Unlock a standardized and efficient management framework: It provides a single, expert-defined security baseline across all your devices, which simplifies system auditing, prioritizes critical fixes (using the CAT I, II, III severity levels) and streamlines auditing and reporting. Ready to strengthen your security?Get everything your team needs to harden your Android devices, meet compliance mandates, and build a more resilient mobile fleet directly from the DISA repository.➡️ Download the Google Android 16 STIG hereFor those interested in federal device certification, our latest episode of The Secure Element delves into the approval process for Android devices in compliance-focused sectors.

The pace of innovation in Chrome Enterprise and ChromeOS continues to accelerate. Earlier this year, we launched a wave of powerful AI-driven features designed to fundamentally change how you manage your fleet and support your end-users. We’ve summarized the key developments below, focusing on the practical, day-to-day applications for your administrative work.  Part 1: Empowering IT: AI in the Admin Console Updates focus heavily on simplifying the most time-consuming aspects of device management using Google AI and Gemini. 1. Chrome Admin Assistance (Gemini Chatbot)Instant, conversational support and task execution. Instead of navigating complex menus, you can simply ask the chatbot in natural language to perform an action. For example, "What is the status of device serial number X?" or "Initiate a remote reboot for device Y." This significantly cuts down on routine, manual administrative tasks. SIgn up as a trusted tester to avail. 2. Natural Language Processing (NLP) SearchFind policies and devices instantly without precise keywords. No more guessing policy names or remembering exact search syntax. You can now use plain English for complex queries like: "Show me all devices enrolled last month" or "Find the policy for blocking USB storage." This makes fleet audits and configuration checks much faster. 3. Intelligent Recommendations (Related Settings)Ensure comprehensive and optimized configurations. When you’re viewing the details of one policy (e.g., microphone control settings), the Admin Console now surfaces other logically related policies (like audio output settings). This prevents overlooked settings and ensures a more complete and secure setup. Part 2: Powering end-users (and reducing your tickets) While your focus is on the fleet, these end-user-facing AI enhancements are vital because they impact user productivity and, ultimately, your support load.  Gemini integration in Google Workspace: If your organisation does have Workspace, users now have powerful AI assistants in Gmail (summarizing threads, composing faster), Docs, Sheets, and Slides. As an Admin, you can easily pin Gemini to the Chromebook shelf, ensuring simple, centralized access for all employees. AI built into ChromeOS: Users gain productivity tools that work across any application, not just Google's. Features like Help me read and Help me write assist with comprehension and content creation in third-party or web applications. Furthermore, AI-enhanced video call controls and Live Translate directly on the device improve meeting quality and cross-lingual collaboration, leading to less friction and fewer support requests for connectivity/tool issues.  Part 3: The Right Hardware To unlock these most advanced AI experiences, organizations should look to Chromebook Plus devices, which meet a higher standard for performance and memory. When planning your next refresh cycle, ensure the hardware can support the full stack of new AI capabilities to maximize user benefit. Ready for the Deep Dive? Be sure to read the full post: The IT Admin's Guide to Google AI.

We’re excited to announce our newest Chrome Enterprise Recommended solution, Cisco XDR!   Cisco XDR integration with ChromeOS streamlines threat detection and response on Chromebooks by unifying Cisco's advanced security capabilities within a seamless, cloud-native integration. The Google Chromebooks module allows Cisco XDR to automatically retrieve the details and properties of enrolled ChromeOS devices, providing important context about devices included in security detections. This lightweight solution empowers organizations with real-time visibility, automated response actions, and continuous protection across endpoints.    Why this partnership is important for customers:    Cisco XDR can automatically take action on a threat detected on a Chrome device, such as isolating the user or device, which dramatically reduces the time to respond to an incident and minimizes potential damage. The partnership simplifies the adoption of a Zero Trust security model by providing a validated way to secure users and devices from the browser. This allows customers to easily apply granular access controls, ensuring that only trusted users and healthy devices can access corporate resources. This also allows triage and response decisions to be made from a perspective that includes the nature, purpose, and use case of the affected device.   Explore the new capabilities offered by this partnership!   Check them out on our CER directory Visit their website to learn more about their solution and our partnership! Google Chromebooks for Google Chromebooks to learn more about this partnership

We are pleased to announce a significant update that expands support for various printer types through the introduction of Custom PPD Files in the Google Admin Console. This update provides IT Administrators with greater flexibility in managing their printer fleets on ChromeOS.   What's New?   IT Admins can now utilize a crucial third option when setting up printers: using a custom, remotely hosted PostScript Printer Description (PPD) file. Until now, you could only set up a printer using either driverless configuration or by specifying the manufacturer and model. This often created a gap for specialized or niche printers. With Custom PPD support, we’re bridging that gap by allowing you to upload a file that precisely describes the printer's capabilities.   What’s a PPD?   A PostScript Printer Description (PPD) file is a text file created by a printer manufacturer that contains all the essential information about a specific PostScript printer's capabilities and features. This includes crucial details like supported paper sizes, the number of paper trays, duplexing (two-sided printing), and other unique options.   Essentially, the PPD file acts as a driver for PostScript printers, allowing ChromeOS to understand how to communicate with the device and unlock its full range of functions.   Key Benefits for Your Fleet   Expanded Compatibility: Easily onboard specialized printers that were previously difficult or impossible to configure using the standard manufacturer/model options. Maximum Options: Ensure your printer fleet is set up with the widest possible range of options, as the PPD file enables all the printer's capabilities (e.g., specific trays, custom paper sizes, and advanced finishing options). Detailed guidance for IT administrators on how to implement and use Custom PPD files is available in the updated Help Center documentation: Add a printer - Chrome Enterprise and Education Help.

We’re excited to announce our newest Chrome Enterprise Recommended solution, FortiClient!   FortiClient is a Fabric Agent that delivers protection, compliance, and secure access in a single, modular lightweight client. A Fabric Agent is a bit of endpoint software that runs on an endpoint, such as a laptop or mobile device and communicates with the Fortinet Security Fabric to provide information, visibility, and control to that device.   Why this partnership is important for customers:    FortiClient enables businesses to build a modern and scalable security architecture for their remote and hybrid workforce without sacrificing security or performance. IT administrators can streamline security management by leveraging the familiar Google Admin Console together with the tightly integrated FortiClient Endpoint Management Server (EMS) to quickly deploy, enforce consistent policies, and manage a unified set of advanced security controls.   Explore the new capabilities offered by this partnership!   Check them out on our CER directory Visit their website to learn more about their solution and our partnership!

We’re excited to announce our newest Chrome Enterprise Recommended solution, Ilex Access Management!   Ilex Access Management is a true authentication hub that relies on centralized administration, and offers a global approach to identity and access management and local support from renowned experts. The solution offers enhanced security, improved user experience and compliance.   Why this partnership is important for customers:    Ilex Access Management is optimized to work with the Chrome Device Trust Connector, which reduces complexity for managing access controls in a device fleet and streamlines IT workflows.  Deep integration with the ChromeOS ecosystem enables a frictionless user experience with features like fast user switching and passwordless authentication thanks to their badge authentication integration. This improves productivity and is beneficial for frontline workers who share devices.   Explore the new capabilities offered by this partnership!   Check them out on our CER directory Visit their website to learn more about their solution and our partnership Read this blog about their partnership with ChromeOS

Hello everyone,   To better protect your Google domain from unauthorized access, we will soon begin requiring 2-Step Verification (2SV) for administrative Managed Google Accounts.   Why the change? Your account's security is a top priority. 2-Step Verification provides a critical layer of defense against account hijacking by requiring a second step to verify your identity when you sign in. This makes it much more difficult for an unauthorized person to access your account, even if they have your password.   What you need to know This change will be rolling out in the near future. We encourage you to enable 2-Step Verification now to ensure your account is prepared.   For more information and step-by-step instructions, please see our help article.    Find out more about upgrading to a Managed Google Accounts in this community Feature Focus post.    Thank you for your partnership in keeping Android secure.    The Android Enterprise Team

We're excited to share the results of a new study on the economic impact of ChromeOS, which highlights the significant value it can bring to your organization. The Forrester Consulting study, commissioned by Google, provides a detailed look at the financial and operational benefits of adopting ChromeOS in a business environment. You can read the official blog post about the study here.   Why This Study Matters The study, based on in-depth interviews with four ChromeOS customers and five Google employees, offers a real-world look at how ChromeOS helps organizations cut costs and boost efficiency. For a composite organization of 10,000 employees using 3,000 Chromebooks, the findings were significant. The full report can be found here and is also available in French, German, and Japanese below.   Key Findings and Results The study found that the composite organization realized a $6.8 million in savings over a three-year period, resulting in a 208% return on investment (ROI). These impressive results were driven by significant benefits across four key areas:   Increased end-user productivity: Employees are more efficient with a fast, simple, and secure OS. Lowered device and licensing costs: ChromeOS devices and management are more cost-effective. Strengthened security posture: Built-in security features reduce the risk of cyber threats. Reduced IT support needs: The simple and manageable nature of ChromeOS minimizes the need for IT support. The report in other languages:   German Japanese French   Learn More: Webinar To dive deeper into these findings, we invite you to review an on demand webinar that took place on 18th September 2025. This session walks through the report’s findings, discusses the key benefits of ChromeOS, and explains how you can leverage the ChromeOS Readiness Assessment to identify users ready to transition. 

Hello everyone,To enhance security on Android devices, Google has announced that developers of Android applications, including those distributed outside of the Google Play Store, will be required to complete developer verification in order for their apps to be installed on Android devices. This new policy is designed to combat the spread of malware and financial fraud by increasing developer accountability. Rollout starts in September 2026 for Brazil, Indonesia, Singapore, and Thailand. This requirement will be expanded globally in 2027 and beyond.We understand that enterprise organizations often use off-Play methods of distribution methods for private applications. As such:   Applications installed on fully managed devices (DO) or within Work Profiles (BYOD and COPE) can continue to be installed, without developer verification, until September 2027. After this point, developer verification will be required for the app to be installed. Applications installed by EMM Device Policy Controllers (DPCs) will be exempt from requiring developer verification indefinitely.  (For example, apps installed via Workspace ONE Intelligent Hub, Intune Company Portal, SOTI MobiControl, etc.) Private applications installed with Managed Google Play will be exempt from developer verification indefinitely. We would welcome your feedback on other application distribution methods used by your company and how this recent announcement will impact you.   The Android Enterprise Team   *Article updated 4 Sept 2025, by CM - minor text removal for clarity

Hey everyone,We're pleased to announce a brand new initiative built exclusively for you, the members of the Android Enterprise Customer Community: Android Enterprise Insiders!What is the Android Enterprise Insiders Program?In short, it’s your opportunity to get hands on with Android Enterprise features before they are generally available or when they are hot off the press.As an Insider, you will: Get hands on with new functionality. Share your feedback to help us identify improvements to the feature or documentation. Collaborate with your peers, exploring the new features of Android device management.   Why Are We Launching This Program?You are the experts on the front lines, managing mobility for your organizations every single day. Your insights and real world experience are invaluable. We want to build a stronger partnership with you and create a direct channel for your feedback on specific features.The Android Enterprise Insiders program is our way of moving beyond traditional feedback collection. It’s a dedicated board within the Customer Community designed to give you early access to new features and a seat at the table as we refine them. Together, we can ensure that the future of Android Enterprise is powerful, practical, and perfectly suited to your needs.What Can You Expect?In early September we’ll be launching a dedicated space right here in the community for our Insiders. Here’s a high-level look at how it will work:Access to Insiders: Once you are an Insider you will have access to a dedicated Insiders discussion area, which will act as your home for the programme and you can meet other members there.Apply for Initiatives: When a new feature is ready for testing, we’ll post about the opportunity. You can then express interest to participate in that specific initiative.Get Hands On: Approved applicants will be granted access to a private project area. There, you'll find everything you need to get started, including onboarding guides and testing instructions. Please note: Depending on the feature, an NDA may be required.Share Your Voice: You can create posts to share feedback and report issues. We may also host office hours and other online sessions to discuss the features in more detail.Who Is This For?We're looking for any IT admin who manages an Android Enterprise deployment. While the overall program is open to everyone, specific testing opportunities may have certain requirements (e.g. using a particular EMM partner, a specific device type, or enrolment method).This is why keeping your community profile up-to-date is important! It will help us match you with the Insider opportunities that are most relevant to your deployment and interests.Ready to Become an Insider? Here’s how to get started Update your community profile! Critically, we need your Android Enterprise Org ID. This is the most important step to ensure we can invite you to relevant programs down the line. Like or comment on this post. This way we’ll know you're interested in participating. We hope this sounds like an exciting initiative and thank you for being a part of this community, we look forward to further collaborating with you! The Android Enterprise Team

In today's fast-paced digital landscape, making informed decisions about your IT infrastructure is crucial. One year since its original launch, we're excited to spotlight a powerful asset that is helping organizations around the globe: the ChromeOS Readiness Tool. This solution, developed by Codimite, is designed to give you the critical insights needed to streamline your transition to ChromeOS, optimize your fleet, and modernize your IT environment.   What is the ChromeOS Readiness Tool?   Initially conceived to identify ideal users for ChromeOS pilots, the tool has evolved into a comprehensive compatibility assessment platform. It goes beyond simple device readiness, providing a complete picture of your organization's IT landscape.   Key features and benefits for IT Admins include:   Detailed readiness reports: Get a comprehensive view of your device readiness, including system compatibility and detailed reports that highlight potential areas for action. Browser insights: Understand your organization's browser and extension usage to make data-driven decisions and identify opportunities for optimization. Strategic planning: The tool helps with application usage analysis and hardware inventory, assisting in cost optimization by pinpointing unused software and paving the way for a more efficient IT strategy. Secure and transparent: Data collection is fully controlled by the administrator, and all stored data is secured with strong encryption, ensuring your peace of mind. A Year of Unprecedented Growth   In just one year, the ChromeOS Readiness Tool has seen tremendous success, a testament to its value and effectiveness.  Over 71 unique organizations have deployed the ChromeOS Readiness Tool within their organization New features, such as a partner/pro dashboard notification system and peripheral device data reports, have been built to support customer-specific requests. What's Next?   The momentum is building, and the Codimite team is working on new features to deliver even more value: Japanese Language Support: To meet the growing interest in the JAPAC region. MacOS Support: Expanding compatibility to help customers with mixed Windows and Mac environments. Gemini Suggestions: Providing actionable next steps for "Attention Needed" applications. Resources to Get Started   Ready to see how the ChromeOS Readiness Tool can transform your IT operations? Schedule a Demo: Fill out this form from Codimite’s site. Learn More: Visit the Resource Center to browse their documentation and videos. We are excited to see how this tool will continue to evolve and empower IT professionals worldwide. Here’s to another year of growth and innovation!

  ChromeOS is rolling out a new feature called Desk Sync, designed to make device transitions seamless for users and streamline workflows for your organization. This is a shorter version of the full blog post, focusing on what you need to know.   What is ChromeOS Desk Sync?   Desk Sync is a new feature that automatically transfers a user's entire workspace - including open windows, tabs, and applications - to a new ChromeOS device. It also authenticates them into their web services, eliminating the need for a manual setup. The goal is to let employees pick up their work right where they left off, even when they switch devices.   What's the practical application for my organization?   This feature is particularly beneficial for frontline workers who frequently switch devices during their shifts. By removing the time and effort required to log in and set up a workspace, it improves operational efficiency and reduces downtime. For example, in a retail environment, it can enable a quick and smooth hand-off between employees at shift change. In healthcare, it allows professionals to move between locations without delay, maintaining a focus on patient care.   How is this different from existing features?   Unlike previous methods that might have required manual steps, Desk Sync is automated and comprehensive. It's designed to provide a truly seamless transition, ensuring the user's full workspace, including app states and web authentication, is maintained.   For more detailed information, including use cases in different industries, you can read the full blog post here.   And you can view our help center page to begin your configuration.   If you use this feature, let us know in the comments below or respond within the discussion board.

In today's dynamic work environment, simplifying cloud operations and enhancing user experience are paramount. That's where the Chrome Enterprise Recommended program comes into play, serving as a vital resource for identifying validated partner and third-party solutions that are optimized for ChromeOS devices.   This program is designed to give you confidence in your technology stack. When a solution is Chrome Enterprise Recommended, it means it has been rigorously validated by Google for performance and compatibility. Many of these solutions offer seamless integrations and connectors that plug directly into your existing IT tools, making deployment and management a breeze.   Let's explore some of the key areas where Chrome Enterprise Recommended solutions are making a significant impact:   Fortifying Your Defenses: Security and Trust  Security is a top priority for every IT admin. The Chrome Enterprise Recommended program features robust security solutions designed to protect your organization. Partners like Cisco Duo for access security, CrowdStrike Falcon for security event correlation, Okta for identity and access management, Palo Alto Networks Cortex XDR for enhanced threat hunting, and Ping Identity for zero-trust access controls are all part of this program, offering you a comprehensive suite of tools to build a resilient security posture.   Streamlining Printing: Print Management  Managing printing across a distributed workforce can be a challenge. Chrome Enterprise Recommended offers solutions like Papercut, Pharos Chrome Print, Vasion Print (formerly PrinterLogic SaaS), and Printix cloud print management. These tools are designed to simplify secure printing, reduce costs, and provide a hassle-free experience for your users.   Improving output: Productivity and Collaboration  The program also highlights solutions that empower your teams to work more efficiently. From visual communication with Canva to relationship management with SalesforceCRM and secure agreement signing with DocuSign eSignature, these tools help enhance productivity and foster seamless collaboration within your organization.   Seamless interactivity: Communications  Chrome Enterprise Recommended provides powerful web-based solutions like Zoom and Webex Meetings, designed to keep your employees in sync and highly productive. With these tools, your team can enjoy seamless communication from anywhere, whether it's through voice, video, or text chat.   Beyond these highlights, the Chrome Enterprise Recommended program also encompasses solutions for:   Contact Centers: Optimizing customer interactions. Virtualisation: Delivering flexible and secure access to applications. Kiosk and Signage: Managing dedicated devices for specific purposes. Healthcare: Meeting the unique needs of healthcare environments.   By leveraging Chrome Enterprise Recommended solutions, you can simplify your IT operations, enhance security, and provide your users with an optimized and seamless cloud work experience.   Learn more and stay connected! For more detailed information about the Chrome Enterprise Recommended program and its partners, visit the official website: https://chromeos.google/intl/en_uk/resources/recommended/.   Furthermore you can see compatible peripherals outlined here: https://support.google.com/chrome/a/table/14169095?hl=en

For enterprise organizations, Chromebook Plus is evolving with integrated Google AI, designed to enhance productivity, creativity, and collaboration. New devices, like the Lenovo Chromebook Plus, feature powerful NPUs for on-device generative AI. Learn more.   Key AI features include: Smart Grouping: Organize tabs and apps efficiently. On-Device Image Generation: Create graphics instantly. Help Me Read: Simplify complex text. Text Capture: Extract information from screens. Select to Search with Lens: Quick information retrieval. These features come with built-in IT admin controls, ensuring a secure and intelligent platform for the modern workplace.   For more details, read the full blog post here: Work smarter with Chromebook Plus and Google AI

For IT Admins, the evolving capabilities of ChromeOS Flex offer a powerful way to modernize device fleets, enhance security, and simplify deployment. This update to Flex Remote Deployment enables efficient transformation of existing PCs and Macs into secure, cloud-first ChromeOS devices, regardless of location. Revitalize Your Hardware, Streamline OperationsChromeOS Flex extends the life of your current hardware, reducing e-waste and lowering total cost of ownership. Devices boot quickly and maintain speed, ensuring consistent productivity.The updated Flex Remote Deployment simplifies large-scale deployments, allowing automatic conversion of managed PCs to ChromeOS Flex without complex IT requirements. Deploy across your fleet via USB or network, with cloud profiles syncing settings instantly. Key management benefits include:  Centralized Control: Manage all ChromeOS Flex devices alongside native ChromeOS devices via the Google Admin console. Remote Policy Configuration: Use ChromeOS Enterprise Upgrade for remote updates and policy configuration, ensuring consistent security. Mass Deployment: Integrate with tools like Microsoft SCCM or Windows Deployment Services for efficient rollouts.  Enhanced Security and User ExperienceChromeOS Flex boasts proactive security with sandboxing and blocked executables, minimizing the need for traditional antivirus. IT controls prevent data loss, and automatic background updates keep devices secure and current. Employees benefit from a fast, clutter-free experience with quick access to VDI and web apps. Get Started TodayChromeOS Flex is a no-cost download, offering an accessible path to a cloud-first OS. While it provides most ChromeOS benefits, certain hardware-specific features (like Google security chips and Android app support) are exclusive to native ChromeOS devices. Full management capabilities for ChromeOS Flex require ChromeOS Enterprise Upgrade or Chrome Education Upgrade. To learn more about ChromeOS Flex and its deployment options, including the newly launched remote deployment feature, you can explore the ChromeOS Flex engagement page or review the ChromeOS Flex one-pager. Furthermore, check out the official Google Blog Post.

Further to the Help Center post, we wanted to bring up an important update regarding Chrome Sign Builder. As part of the ongoing evolution of ChromeOS and the phasing out of Chrome apps in kiosk mode, Chrome Sign Builder will soon be deprecated.   What's Happening?   Chrome Sign Builder, a Chrome app used to schedule and display content on managed ChromeOS kiosk devices, is reaching its end of support. This change is aligned with the broader initiative to transition from Chrome apps to more robust and modern web-based solutions.   Key Dates to Remember   The Chrome Sign Builder app will be removed from the Chrome Web Store at the end of ChromeOS M150. This means it will no longer be available for download or continued use beyond this point.   Your Alternatives for Digital Signage   We understand that digital signage is a crucial part of many organizational setups. To ensure a smooth transition, we recommend the following alternative solutions:   Option 1: Partner with Comeen - Consider leveraging Comeen, a Chrome Enterprise Recommended Partner. Comeen offers a direct replacement with their web-based digital signage application, designed to meet your needs and integrate seamlessly with ChromeOS. Option 2: Manually Deploy a Web App - For those who prefer to manage solutions in-house, you can manually deploy a web app through the Google Admin console. This involves adding the URL of your chosen digital signage web application and, optionally, configuring it to auto-launch on your kiosk devices.   Action Required: Deleting Chrome Sign Builder   To ensure a clean transition and remove the deprecated app from your managed devices, please follow these steps:   Navigate to the Google Admin console. Go to the Apps & extensions page. If Chrome Sign Builder is configured in your organization, you will see a notification banner. Proceed with deleting Chrome Sign Builder from your devices. Please note that deleting the app will also remove any associated user data upon the device's restart.   We encourage you to begin planning your transition to an alternative solution well in advance of the M150 deprecation to avoid any disruption to your digital signage operations.

We wanted to talk about a fantastic way to elevate your expertise and recognition within our community and beyond: the ChromeOS Admin Professional Certification!   What is the ChromeOS Admin Professional Certification? This certification validates an IT professional's ability to configure, deploy, maintain, troubleshoot, secure, and manage ChromeOS environments using the Google Admin console.    A huge shout-out to our certified community members! A massive congratulations to all our community members who have already earned this impressive credential! We are incredibly grateful to have you as part of our community. Your expertise significantly enriches our discussions and provides invaluable insights. For those of you who've earned this, you'll soon see a special badge showcased on your community profile. This badge will instantly highlight your verified expertise, lending even more credibility to your questions and responses.   How Can You Get Certified Too? Ready to join the ranks of certified ChromeOS professionals? Here's how: Understand the Exam: The exam assesses your knowledge of Google Admin console actions, ChromeOS policies, identity management, and core ChromeOS tenets. It's a 2-hour, multiple-choice test. Gain Experience: While no formal prerequisites exist, we recommend at least 12 months of hands-on experience with the Google Admin console. There are some great online resources to check out also and validate your competency. Prepare with Resources: Explore official ChromeOS certification resources and consider courses like "Introduction to ChromeOS Administration" on Google Cloud Skills Boost. Extensive practice within the Google Admin console is crucial. Register for the Exam: Visit the official ChromeOS certification website to register and schedule your exam.  Becoming certified is a fantastic way to validate your skills, boost your career, and become an even more impactful contributor to our community. Check out the certification website and exam guide.

Google I/O 2025 was undeniably an AI-centric event, showcasing a future where artificial intelligence is deeply embedded across Google's ecosystem.    Here's a breakdown of the key areas and their potential relevance for managing your ChromeOS fleet and users:   Pervasive AI Integration Across Google Products The event underscored the "extensive application of AI across Google's products, with major upgrades to the Gemini app, generative AI tools, and AI models." For IT admins, this means: User Experience & Training: As AI becomes more integrated into familiar Google Workspace applications (which are heavily used on ChromeOS devices), your users will experience new functionalities. This may necessitate updated training protocols, or support resources to help users effectively leverage AI-powered features like personalized smart replies in Gmail or new functionalities in NotebookLM. Security and Compliance: The increased use of AI, especially with generative capabilities, brings new considerations for data handling and privacy. IT admins will need to evaluate how these AI features interact with sensitive enterprise data and ensure compliance with organizational security policies on managed devices. AI in User Interaction and Device Capabilities Evolving Google Search and User Interfaces: Features like "AI Mode for Google Search," introducing "Deep Search for thorough responses," and "Live capabilities from Project Astra for real-time interaction using the camera," are transformative. From a device management perspective, this could imply: Network Considerations: More complex AI interactions might demand greater network bandwidth or processing power from devices. Privacy Implications: Features leveraging real-time camera interaction (Project Astra) highlight the importance of device camera management and privacy settings within an enterprise context. IT admins will need to understand and potentially control these capabilities on user devices. Project Astra's "Computer Control" Capabilities: A particularly noteworthy advancement mentioned was Project Astra "evolving into a 'world model' with improved memory, computer control." While still in development, the concept of AI gaining "computer control" capabilities is a significant point for IT administration. This could eventually lead to AI-driven automation of tasks on devices, requiring IT admins to define permissions, monitor actions, and ensure security protocols are in place to manage these powerful new capabilities. Broader Enterprise Relevance Developer Tooling Evolution: Updates to developer tools like Google AI Studio and Colab, along with new open models, are indirectly relevant. If your organization develops custom applications that run on Android (and thus on ChromeOS), or integrates with Google's APIs, advancements in these areas could impact your internal development and deployment processes on managed devices. Conclusion Stick with us to remain informed about these broader AI advancements which appear to be essential for maintaining a secure, efficient, and forward-thinking enterprise environment.   For more details on the announcements, refer to the official Google Blog: Google I/O 2025: 100 things Google announced

Original Post Date: 29-10-2024   Its Cyber Security Awareness Month so here are three use links for you:     https://threatmap.fortiguard.com/ - Fortinet’s map offers a dynamic, global view of cyber threats by showing live attacks based on its network. It tracks the types of attacks, their origins, and targets, making it a useful tool for understanding the scale and type of threats occurring in real-time.   Forrester research has found businesses could save up to $2.6 million in cybersecurity costs by using Chrome Enterprise Core. You can read the full report in the resources section of the community here: https://chromeos.community/community/396/resources   https://threatmap.checkpoint.com/ - FireEye’s map visualizes live cyber threat activity and provides a filter to see specific types of attacks, like malware or botnets, as well as their geographical locations. This map can also help you understand current cybersecurity trends globally.  

Original Post Date: 17-10-2024   We have an exclusive opportunity to be a beta tester for the new upcoming Chrome Browser certification coming!   This will allow you to gain a competitive edge by getting to know the content. 🤓   You will also get the chance to shape the final exam.   If you are interested, you can sign up here: Sign up here   Registration for this form is open until October 23rd, and all registered beta candidates will receive a follow-up from the team after the registration deadline.

Original Post Date: 08-10-2024   We know that extensions can supercharge productivity, security, and more. Drop a comment below and let us know:   Which Chrome extensions do you and your teams rely on the most?   How do they impact your day-to-day work?   Are there any hidden gems you’ve discovered that others should know about?   Comment below and let us know.

Hello everyone, We're thrilled to announce significant enhancements to the zero-touch customer portal, designed to provide greater control over customer data. The portal's role-based access control has been updated to include three new user roles, ‘Manager’, ‘Assigner’, ‘Viewer’, for greater control of the data and capabilities each portal user has access to.     Read this Help Center guide to learn about these new roles and how to add users to these new roles.    Migration Timeline:  This is now available.    We know many of you are excited to have this new capability, thank you to those of you who provided feedback and input.   It would be fantastic to hear your thoughts, are you planning on using these new roles in your organisation or any additional questions, below.   Thank so much.   *Timeline updated 24 June, 2025

Today’s AI-driven, mobile-first world demands a modern platform to power productivity and collaboration, while keeping security at its core to help mitigate new potential threats.  Android is continually evolving to meet new business needs. As organizations increasingly rely on mobile solutions, the demand for robust security, seamless collaboration, and efficient management have never been higher.    We’ve already released many powerful updates this year, with more on the way. Here’s a look at the latest advancements designed to power modern employee experiences and strengthen your digital defenses:   Resilient security and integrated defense Built-in security businesses can trust.   Advanced Protection1: Safeguard teams from targeted cyberattacks with multi-layered defense against online attacks, harmful apps, and data risks. Turn on Google’s most powerful security features with a single tap for continuous protection. APN Overrides via AMAPI: Precisely manage and secure cellular connectivity by defining and enforcing custom network and APN rules on managed devices, ensuring devices only connect to authorized networks.  Identity Check2: Employees can now protect access to sensitive data outside of trusted locations by enabling required biometric authentication to access sensitive resources outside of trusted locations to defend against account takeovers.  Corporate badges in Google Wallet3: Employees can add their corporate ID badge to their Google Wallet for secure, one-tap access to NFC-enabled work buildings.   Advanced Protection UIIdentity Check UI flowCorporate badges in Google Wallet   Modern experiences built for today’s teams Equip your workforce with new productivity and digital wellbeing tools for more efficiency and a better employee experience.   Material 3 Expressive: Elevate the employee experience across managed and unmanaged devices and apps with customizable UI, smoother movements and better feedback. Teams will be able to access the new UI later this year. Notification Auto-Grouping: Minimize distractions and digital fatigue. Notification Auto-Grouping tackles digital clutter by consolidating multiple notifications from one app into a single, cohesive display. Desktop Windowing: Discover desktop-like multitasking on Android tablets. Teams can open and resize multiple app windows side-by-side, empowering employees to multitask efficiently and collaborate without constant screen-switching.  TaskBar Overflow: Access and organize apps more easily on Android tablets. An expandable panel makes it easy to sort through all open apps, even when the main taskbar is full. Teams can also pin critical apps for instant access, saving time and keeping things organized. Custom Keyboard Shortcuts4: Accelerate workflows and improve efficiency on Android tablets with an attached keyboard. Teams can create personalized shortcuts for frequently used apps to tailor their work experience. Gemini in Google Docs5: Unlock AI-powered productivity as you work from your phone. Gemini is built right into Google Docs, so employees can instantly summarize documents, refine content or create a new draft, without switching apps.  PDF in Chrome on Android: Revamp workflows with in-browser viewing of linked PDFs, which now open directly within a new Chrome tab.   Desktop Windowing UI Flow Scalable control with simplified provisioning and governance Optimize IT operations with streamlined deployment and centralized management across your Android fleet.   Efficient device setup6: Streamline device onboarding and boost productivity from day one. An improved setup workflow for managed Android devices enables IT teams to deploy fleets with fewer screens and reduced issues, freeing up resources and giving quicker access to corporate resources to employees. Device EID access for eSIM Management7: Enable eSIM provisioning at scale. Help streamline provisioning and management by pulling EID values from your managed fleet, including BYOD, to enable seamless provisioning of eSIMs on enrolled devices.  5G Slicing via AMAPI8: Solve network congestion with new AMAPI support for 5G slicing. IT teams can route enterprise app traffic through designated network slices, guaranteeing reliable performance for essential workflows on Android devices. Support for Android App Bundle (AAB) files for private apps: Simplify internal app distribution and management. AAB file support for private apps on Google Play helps IT rapidly deploy, update, and manage proprietary tools, streamlining delivery, and optimizing app size. Zero-touch Customer Portal improvements: Customize permissions and gain more transparency across enrolled devices. Detailed Zero-touch audit logs record account activity, for better user support, abuse prevention and compliance. Plus, new capabilities for administrators to define and assign access levels for admin roles are coming soon. Zero-touch Customer Portal Audit Log UI Flow Dive into the Community   Android is constantly evolving with exciting new features and our community is a great resource for staying informed, discussing what’s next, and sharing best practices to best leverage these updates.    In case you missed them, explore some of our recent articles and discussions: Introducing Device Trust from Android Enterprise Zero-touch Enhancement: Audit Logs Android App Bundle Support in Managed Google Play Signup and Device Enrollment: New features and upcoming plans For a deeper dive into the how-to’s, check out our Help Center article.   In the meantime, share your thoughts - what features are you most excited about? Do any of these new features solve any existing pain points? Let us know what you’d like to see next in the comments below!   1 Available on Android 16+. Some features will launch later this year; Some features may be available only on select devices. Some features require individual user activation and cannot be centrally enforced by IT departments.   2 Available on Android 16+ and on select devices. Some features require individual user activation and cannot be centrally enforced by IT departments.   3 Google Wallet is a trademark of Google LLC.   4 This feature requires a keyboard   5 Rolling out to eligible Google Workspace Business Standard, Plus, Enterprise Standard, and Plus customers, as well as those with specific Gemini Education or Enterprise add-ons. It's available on Android phones and tablets running Android 8+ , with no admin controls, and rollout pace may vary.     6 Available on Android 16+. For devices running on Android 15, please reach out to your OEM for availability.   7 For all devices, eSIM management is conducted via the EMM.  Additionally, for BYOD devices, the device’s owner is responsible for using and activating the eSIM, and the user can delete the eSIM at any point.   8 AMAPI support available on Android 16+. Availability varies by carrier.

In today's world, our smartphones and tablets have become essential tools for getting work done, wherever we are. This "mobile-first" reality means that keeping company data secure on these devices is more critical than ever. Traditional security methods, like just having a firewall around the office network, aren't enough anymore.   That's why Android Enterprise supports a Zero Trust security model. Think of it like this: instead of automatically trusting everyone inside the network, Zero Trust assumes nothing and verifies everything before granting access to sensitive information.  With 63% of organizations worldwide having partially or fully implemented a Zero Touch strategy, and 96% of organizations favoring this approach, Zero Trust has become the standard for security across organizations.   Android is making it easier than ever to bring this Zero Trust framework to your mobile workforce with Device Trust from Android Enterprise.*   What exactly is Device Trust from Android Enterprise? Simply put, Device Trust from Android Enterprise helps organizations verify the security status of Android phones and tablets before allowing access to work apps and data. It works across all device ownership models (company-owned or  BYOD), and at any level of device management (enrolled to an EMM or completely unmanaged), acting as a constant security validation for all Android devices used for work.   How does it work? Device Trust from Android Enterprise uses a comprehensive set of over 20 different trust signals to assess a device's security posture. These signals look at things like: The security patch level The security status of the network the device is connected to Whether the OS version is up to date By bundling all these checks together, Device Trust from Android Enterprise provides a reliable way to understand how trustworthy a device is. This makes it simpler for your IT team to manage mobile security while providing a smooth experience for your employees. Plus, it's designed to protect both user and company privacy.   What does this mean?   1. Security you can trust: Protect your data with intelligent and adaptable device security. Device Trust from Android Enterprise works effectively whether company owned and managed by an EMM, employee personal devices are managed by an EMM, using an Android Work Profile, or are unmanaged but utilize a partner security app. Device Trust from Android Enterprise allows businesses to secure the full management spectrum of Android devices used for work. Align with the latest industry standards and best practices around Zero Trust and mobile security, including including ISO/IEC 27001, 27002, 27005, to stay ahead of evolving threats. Ensure ongoing protection with continuous, real-time evaluation and validation of device health at multiple access points. 2. Flexible solutions for diverse use cases: Embrace a security approach that adapts to the diverse ways your employees work. Get direct access to reliable trust signals, empowering you to make informed access decisions and react swiftly to potential risks. Unify and simplify your security management by integrating Android mobile devices into your existing mobile threat defense (MTD), endpoint detection response (EDR), identity provider (IdP), and security information and event management (SIEM) workflows. Leverage our rich ecosystem of security partners, whose solutions integrate seamlessly with Device Trust from Android Enterprise, to create layered protection across different access needs and tailor security to specific use cases. 3. An uninterrupted employee experience: Empower your team to work effectively without unnecessary security hurdles. Enable instant productivity without needing to formally enroll the device - ideal for flexible and casual work arrangements that don’t require full EMM management. Deploy a security solution built with user privacy in mind, utilizing vetted partners and secure data interfaces. Maintain seamless access with continuous, behind-the-scenes security checks that won't disrupt workflows or require constant user interaction.   Who can benefit from Device Trust? Built to be flexible, Device Trust from Android Enterprise benefits businesses of all sizes.    For Large Enterprises: Strengthen your Zero Trust approach with continuous validation of device security, that accommodates varied access requirements, including full-time staff, contractors, and those in casual work scenarios. By seamlessly integrating with your existing security ecosystem (MTD / EDR, IdP, SIEM), you gain comprehensive visibility and can enforce consistent security policies across your diverse fleet of managed and unmanaged Android devices, enhancing your overall security posture at scale. For Small to Medium Businesses (SMBs): Achieve robust, enterprise-grade security without the typical complexity or extensive IT resources. You don't need a full EMM solution to benefit from Device Trust from Android Enterprise. This allows you to cost-effectively protect sensitive business data on employee devices and enable secure remote work, even on personal devices. In a world where mobile devices are our primary work hubs, Device Trust from Android Enterprise offers a robust and reliable way to unify security tools on mobile, and fortify your defenses.   Ready to learn more?  For a more detailed overview, explore our Keyword blog. Don't miss our upcoming digital episode, ‘Android Talks Device Trust,’ where we'll take a deep dive into Device Trust from Android Enterprise and our partner solutions. Register here. Let’s keep the conversation going, we’d love to hear your initial thoughts in the comments below. 👇 How does your organization currently approach securing mobile devices, and where do you see Device Trust potentially fitting in?     *Device Trust from Android Enterprise solutions are built and offered by third-party providers integrating into the Android Management API. Exact features may vary depending on third-party integrations. Access on unmanaged devices requires user consent to use the Android Device Policy app. Device Trust from Android Enterprise is supported on Android 10 and above.  

Hey everyone,   For those of you using private apps, I’m pleased to let you know that the Managed Google Play iframe now supports Android App Bundle uploads - enabling larger app sizes and the full benefits of app bundles.   With this update, you can now create new private apps using app bundles (with Google generated signing key) and can migrate existing apps to the app bundle by enrolling in Play App signing.     For full details on how this works please visit this Help Center article with information on migration of an existing APK to an app bundle. You can also find more information about using app bundles in this FAQ.    We know many of you have requested this feature before and so we hope you find it useful. It would be great to hear your feedback.    Thanks so much, Lizzie