The Lumu Agent is also compatible with devices running ChromeOS, and its installation is simple and straightforward. Deployment can be efficiently managed across your entire ChromeOS user base using the Google Admin Console, streamlining both installation and administration. This document provides guidance on installing and configuring the Lumu Agent on ChromeOS devices.

Requirements

• A user with Administrator permissions in the Google Admin console.
• At least one previously created installation group in the Lumu Portal.
• This extension was designed to be installed on devices running ChromeOS (including ChromeOS Flex).
  
• Extensions must be allowed to use the Enterprise Hardware Platform API. To do so, head to the path Devices > Chrome > Settings > Users & Browsers > Enterprise Hardware Platform API. Once there, select the option “Allow managed extensions to use the Enterprise Hardware Platform API” from the Configuration drop-down menu.
  
  
  
  

Installing the Lumu Agent for ChromeOS on non-ChromeOS devices may disrupt licensing and deployments. Avoid installing on devices with a pre-existing Lumu Agent.

Preliminary Preparations

Once the Agent is deployed to your organization's devices, each device will occupy a slot in your installation group. Make sure you have enough free slots in your installation group, otherwise some devices may not be activated (even if the Lumu ChromeOS Agent is installed).

Agent Deployment

In this section, we will discuss all the steps that you must conduct to deploy the Lumu ChromeOS Agent in your network.

To deploy the Lumu Agent for ChromeOS, you will need access to your organization's Google Admin Console.

1. First, go to the side menu of the admin console, open the Devices drop-down menu, open the Chrome submenu, and select the Apps & extensions section.

2. Inside the Apps & Extensions section, you will see the Organizational Units drop-down, open it and select the organizational unit where you want to deploy the Lumu ChromeOS Agent. To install it globally, you can select the item at the top with your organization's name.

For better traceability, we recommend installing the extension in specific organizational units. This will allow you to easily identify devices where a malicious contact may have occurred and allow for more consistent synchronization with your installation groups in the Lumu portal.

ppclimgpjchjnjplnigjddhkfcceoali

For security reasons, the Lumu ChromeOS Agent extension is set as private on the Chrome Web Store, meaning that only those with the ID can access it. It cannot be found by name.

7. Once selected, a panel will open on the right side to activate and configure the extension as shown in the following image.

In the following section, we will learn about the activation of the Lumu ChromeOS Agent.

Agent Activation

To activate the Agent, you need an activation code. This code is generated when you create an installation group, which you should have already created as per the provided instructions.

1. Go to the Agents section of the Lumu portal, find the installation group for which you want to activate the extensions, click on it to expand it, and use the JSON Code button. This will copy a minified JSON to your clipboard.

2. Go back to the Lumu ChromeOS Agent extension page and scroll down in the while on the settings panel to find the Policy for extensions section. Paste the JSON copied from the Lumu portal as is into the Policy for extensions field of the extension as shown below. You don’t need to modify it in any way.

The Agent is now activated. All that’s left is to configure the agent to install it on all the devices in the selected organizational unit and to provide maximum visibility over the group’s devices.

Agent Configuration and Mass Installation

Once the Agent has been activated, it's time to properly configure it. The recommended configuration for maximum visibility is as follows:

• Force installation on the devices in the organizational unit. (a) To set this, find the Installation Policy section, select the Force install option, or Force install + pin to browser toolbar option if you want the Lumu ChromeOS Agent to remain as an extension in your Chrome bar.
• Force use of the extension in incognito mode. (b) To set this, head to the Incognito mode section and turn on the Extension is mandatory for incognito toggle
• Grant all permissions to the extension. (c) To set this. Head to the Permissions and URL access section, select the Allow all permissions option.

Validate Agent Activation

You can check that the extension is active and working by clicking the extension icon in your extensions bar. If everything was configured correctly, you should see a green circle with the message "Active." Otherwise, if the extension couldn't be activated, you'll see a red circle with the word Inactive.

Do I Need to Upgrade the Lumu ChromeOS Agent?

No. Updates are automatically released by Lumu and installed approximately every 5 or 6 hours. No administrator intervention is required in the Google Admin console.

How to Uninstall the Agent

To remove the Lumu ChromeOS Agent from your devices, click the trashcan icon in the Google Admin panel that appears when you click on the Agent extension.

A confirmation dialog will open, click the DELETE button.