Set up Chrome Enterprise Core for Android

For Android devices with Chrome browser version 99 and later.

As an admin, you can use your Google Admin console to manage Chrome browser on Android devices.

Before you begin

• To manage Chrome browser from the cloud-based Admin console, you need to associate your devices with a domain. For details, go to Sign up for Chrome Enterprise Core.
• To push policies to your Android devices, use a Mobile Device Management (MDM) vendor that supports AppConfig. For example, VMware Workspace One, MobileIron, SOTI, or InTune.
• To configure settings for a specific group of enrolled Chrome browsers, set up organizational units.
• Set policies that apply to all Chrome browser users, whether or not the user is signed in. For details, go to Set Chrome policies for users or browsers.
• To get reporting data on your organization's enrolled browsers, enable Chrome browser reporting.

Set up Chrome Enterprise Core

1. Sign in to your Google Admin console.

   Sign in using your administrator account (does not end in @gmail.com).

2. In the Admin console, go to Menu  DevicesChromeManaged browsers.

   If you signed up for Chrome Enterprise Core, go to Menu  Chrome browserManaged browsers.

3. (Optional) On the left, select the top-level organization. Or, select the organizational unit where you want to generate a token that will enroll browsers directly to that specific organizational unit. For information, see Add an organization unit.
4. At the top, click Enroll.
   Note: If this is your first browser enrollment, you are prompted to accept the Chrome Enterprise Core Terms of Service.
5. Click Copy enrollment token to clipboard .
6. Click Done.
7. Sign in to your Unified Endpoint Management (UEM).
8. Paste the enrollment token string in the appropriate field.
9. Push the profile to Android devices.

It might take up to 24 hours for data about enrolled browsers and the browser reporting information to be updated in the Admin console.

Enroll browsers through UEM

• Enroll browsers with Google endpoint management
• Enroll browsers with Microsoft Intune
• Enroll browsers with MobileIron
• Enroll browsers with SOTI
• Enroll Browsers with VMware Workspace ONE

Verify policies are applied

After you apply any Chrome policies, users need to restart Chrome browser for the settings to take effect. Check users’ devices to make sure policies are applied correctly.

1. On an Android device, open Chrome browser and go to chrome://policy.
2. Tap Reload.
3. Check the Show policies with no value set box.
4. For the policies that you set, make sure that Status is set to OK and the policy values match what you set in the policy.

Unenroll the browser

To unenroll the browser, you need to remove the enrollment token from Android devices.

1. On an Android device, go to SettingsStorageApps.
2. Select the app you want to clear, such as Chrome or Chrome Canary.
3. Tap Clear cache.

Known issues

Some MDMs might configure the Chrome payload with all Chrome policies set to default values. Contact your MDM vendor for information or to make a request. To avoid having to merge policies, consider using Chrome Enterprise Core to only set cloud policies. To change the order of precedence of policies on Android devices, use the CloudPolicyOverridesPlatformPolicy policy.

Google and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.