Add Akamai Zero Trust Client for ChromeOS to the Google Admin Console

Complete this procedure to add Akamai Zero Trust Client for ChromeOS to the Google Admin Console. This procedure automatically installs the app on ChromeOS devices that are already enrolled. You can enroll new devices after adding the app to the Google Admin Console and configuring the necessary policies.

To install the client:

1. In the Google Admin Console navigation menu, go to Devices > Chrome > Apps & extensions > Users & browsers.
2. Click the plus sign icon at the bottom of the page, then click Add from Google Play.
3. Search for Zero Trust Client and select the app.
4. Accept the permissions that the app requires.
5. Under Installation Policy, select Force install from the drop-down menu.
6. Click Save.

Set up your configuration for ChromeOS

Complete this procedure to set configuration values for Zero Trust Client.

1. In the Google Admin Console navigation menu, go to Devices > Chrome > Apps & extensions > Users & browsers.

2. Select Zero Trust Client from the list of the apps.

3. In the Managed configuration area, enter these key-value pairs in JSON format.

{

"entitlementCode": "CODE_or_ACTIVATION_URL",

"owner": "$USER_EMAIL",

"deviceName": "%%DEVICENAME%%-${DEVICE_SERIAL_NUMBER}",

"excludedVpnApps": false

}

CODE_or_ACTIVATION_URL is the entitlement code or the activation URL. In this example, the user email identifies the device owner, while the device serial number identifies the device.

4. If you are configuring the Always-On VPN setting, set “excludedVpnApps”:false in the Managed configuration JSON.
5. Click Save.
   This update may take a few minutes to apply to enrolled devices.

Configure Zero Trust Client for ChromeOS as an Always-On VPN

Complete this procedure to configure Zero Trust Client as an always-on VPN. An always-on VPN means that all user traffic passes through the client and the client is always enabled on the device.

❗️

Before you begin

Set “excludedVpnApps”:false in the JSON configuration file. For instructions, see Set up your configuration for ChromeOS.

To configure Zero Trust Client as an Always-On VPN:

1. In the Google Admin Console navigation menu, go to Devices > Chrome > Apps & extensions > Users & browsers.
2. Navigate to the Always on VPN area and click EDIT.
3. Select the Zero Trust Client VPN from the drop-down list.
4. In the drop-down list, select Do not allow the user to disconnect from a VPN manually.
5. Click Save.