Planning your return to office strategy? See how Chrome OS can help.

Chrome OS zero-touch enrollment is an alternative to manually enrolling devices, where a pre-provisioning partner (device manufacturer, distributor or reseller) sends instructions to Google to automatically enroll a Chrome device into a customer’s domain after a device is turned on and connected to the internet.

For a step-by-step guide, watch the following video:

Zero-touch enrollment requires:

  • A compatible Chrome device
  • A pre-provisioning token generated from the Google Admin console
  • An approved pre-provisioning partner to assist with enrollment
  • Available Chrome Enterprise, Education, or Non-Profit upgrades
Generate a pre-provisioning token

A pre-provisioning token is a unique identifier generated in the Google Admin console, and is used for verification during device enrollment. It can be used for multiple devices and remains active until the admin revokes its use. A separate token can also be generated for each organizational unit.

To generate a pre-provisioning token:

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devicesand thenChrome devices.
  3. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  4. In the bottom-right corner, click Enroll devices ""
  5. A pre-provisioning token will be generated. You can choose to:
    1. Copy pre-provisioning token to clipboard ""
    2. Revoke token ""
    3. Revoke and regenerate token ""

Note: Be sure to provide both the pre-provisioning token and the device's enrolled domain to an authorized pre-provisioning partner to complete the zero-touch enrollment.

Manage devices in pre-provisioned status

A new device status, "pre-provisioned" has been added to the Device status filter in the Admin console. It lists Chrome devices that are ready to be zero-touch enrolled during initial device setup. While a device is in a “pre-provisioned” state, it can be moved to a different organizational unit or deleted. However, once zero-touch enrollment is complete, the device will become “Provisioned”.

Identify compatible Chrome devices

Not all Chrome devices are compatible with zero-touch enrollment. More devices will be added as they are announced. The table below lists devices that are supported currently:

Device manufacturer and model Manufactured date Attested Device ID
Acer Chromebase CA24I2 March 1, 2021 Serial number
Acer Chromebase CA24V2 March 1, 2021 Serial number
Acer Chromebook 311 (C733/C733U/C733T) Beginning January 1, 2021 Serial number
Acer Chromebook 311 (C722/C722T) All devices are capable Serial number
Acer Chromebook 311 (CB311-9H/CB311-9HT) Beginning July 1, 2021 Serial number
Acer Chromebook 314 (C933) Beginning March 1, 2021 Serial number
Acer Chromebook  314 (CB314-2H/CB314-2HT) All devices are capable Serial number
Acer Chromebook 315 (CB315-3H/CB315-3HT) Beginning July 1, 2021 Serial number
Acer Chromebook 317 (CB317-1H/CB317-1HT) All devices are capable Serial number
Acer Chromebook 511 (C741L/C741LT) All devices are capable Serial number
Acer Chromebook 512 (C851/C851T) Beginning January 1, 2021 Serial number
Acer Chromebook 514 (CB514-1W/CB514-1WT) All devices are capable Serial number
Acer Chromebook 712 (C871/C871T) Beginning December 11, 2020 Serial number
Acer Chromebook Spin 311 (CP311-2H/CP311-2HN) Beginning July 1, 2021 Serial number
Acer Chromebook Spin 511 (R752T/R752TN) Beginning January 1, 2021 Serial number
Acer Chromebook Spin 511 (R753T/R753TN) All devices are capable Serial number
Acer Chromebook Spin 512 (R851TN/R852T/R852TN) Beginning January 1, 2021 Serial number
Acer Chromebook Spin 512 (R853TA/R853TNA) All devices are capable Serial number
Acer Chromebook Spin 513 CP513-1H/CP513-1HL/R841T/R841LT) All devices are capable Serial number
Acer Chromebook Spin 514 (CP514-1H/CP514-1HH, CP514-1W/CP514-1WH) All devices are capable Serial number
Acer Chromebook Spin 713 (CP713-2W) Beginning November 2, 2020 Serial number
Acer Chromebook Spin 713 (CP713-3W) All devices are capable Serial number
Acer Chromebox CXI4 All devices are capable Serial number
ASUS Chromebook CX1 (CX1100CNA) Beginning April 1, 2021 ASUS ADID#
ASUS Chromebook CX1 (CX1400CNA) Beginning April 1, 2021 ASUS ADID#
ASUS Chromebook CX1 (CX1500CKA) All devices are capable ASUS ADID#
ASUS Chromebook CX1 (CX1500CNA) Beginning April 1, 2021 ASUS ADID#
ASUS Chromebook CX9 (CX9400) All devices are capable ASUS ADID#
ASUS Chromebook C204MA Beginning April 1, 2021 ASUS ADID#
ASUS Chromebook C214MA Beginning April 1, 2021 ASUS ADID#
ASUS Chromebook C403NA Beginning April 1, 2021 ASUS ADID#
ASUS Chromebook C423NA Beginning April 1, 2021 ASUS ADID#
ASUS Chromebook C523NA Beginning April 1, 2021 ASUS ADID#
ASUS Chromebook Detachable CM3 (CM3000DVA) Beginning March 1, 2021 ASUS ADID#
ASUS Chromebook Flip C433TA Beginning April 12, 2021 ASUS ADID#
ASUS Chromebook Flip C434TA Beginning April 12, 2021 ASUS ADID#
ASUS Chromebook Flip C436FA Beginning May 1, 2021 ASUS ADID#
ASUS Chromebook Flip CM3 (CM3200) All devices are capable ASUS ADID#
ASUS Chromebook Flip CM5 (CM5500) Beginning April 1, 2021 ASUS ADID#
ASUS Chromebook Flip CX5 (CX5500) Beginning March 9, 2021 ASUS ADID#
ASUS Chromebox 4 Beginning March 22, 2021 Serial number
ASUS Fanless Chromebox Beginning December 14, 2020 Serial number
CTL Chromebook NL71/NL71CT/NL71LTE Beginning January 1, 2021 Serial number
CTL Chromebook NL71T/NL71TW/NL71TWB Beginning January 1, 2021 Serial number
CTL Chromebook NL81/NL81T Beginning January 1, 2021 Serial number
CTL Chromebox CBX2 All devices are capable Serial number
Dell Chromebook 3100 Beginning May 26, 2021 Service Tag
Dell Chromebook 3100 2-in-1 Beginning May 26, 2021 Service Tag
Dell Latitude 5300 2-in-1 Chromebook Beginning December 1, 2020 Service Tag
Dell Latitude 5400 Chromebook Beginning December 1, 2020 Service Tag
Dell Latitude 7410 Chromebook Beginning December 1, 2020 Service Tag
HP Chromebook 11 G8 EE Beginning May 17, 2021 Serial number
HP Chromebook 11 G9 EE Beginning March 22, 2021 Serial number
HP Chromebook 11A G8 EE Beginning April 5, 2021 Serial number
HP Chromebook 11MK G9 EE Beginning May 31, 2021 Serial number
HP Chromebook 14A G5 Beginning June 2, 2021 Serial number
HP Chromebook 14 G6 Beginning May 24, 2021 Serial number
HP Chromebook 14 G7 Beginning March 22, 2021 Serial number
HP Chromebook x360 11 G3 EE Beginning May 17, 2021 Serial number
HP Chromebook x360 11 G4 EE All devices are capable Serial number
HP Chromebook x360 11MK G3 EE Beginning May 31, 2021 Serial number
HP Chromebox G3 Beginning December 21, 2020 Serial number
HP Elite c1030 Chromebook Beginning October 7, 2020 Serial number
HP Pro c640 Chromebook Beginning April 12, 2021 Serial number
HP Pro c640 Chromebook G2 All devices are capable Serial number
HP Pro c645 Chromebook All devices are capable Serial number
Lenovo 10e Chromebook Tablet Beginning June 28, 2021 1S + MTM + Serial number
Lenovo 14e Chromebook Gen 2 All devices are capable 1S + MTM + Serial number
Lenovo 100e Chromebook 2nd Gen Beginning July 13, 2021 1S + MTM + Serial number
Lenovo 100e Chromebook 2nd Gen MTK 2 All devices are capable 1S + MTM + Serial number
Lenovo 100e Chromebook Gen 3 All devices are capable 1S + MTM + Serial number
Lenovo 300e Chromebook 2nd Gen Beginning July 13, 2021 1S + MTM + Serial number
Lenovo 300e Chromebook Gen 3 All devices are capable 1S + MTM + Serial number
Lenovo 500e Chromebook 2nd Gen Beginning July 13, 2021 1S + MTM + Serial number
Lenovo 500e Chromebook Gen 3 All devices are capable 1S + MTM + Serial number
Lenovo Slim 5 Chromebook All devices are capable 1S + MTM + Serial number
Lenovo ThinkPad C13 Yoga Chromebook1 All devices are capable 1S + MTM + Serial number
Samsung Galaxy Chromebook Beginning June 26, 2021 Serial number
Samsung Galaxy Chromebook 2 All devices are capable Serial number

1Note for pre-provisioning partners, Lenovo ThinkPad C13 Yoga Chromebook uses 1S + MTM + SN as the serial number. Additional information available here.
Authorized pre-provisioning partners

The partners who currently offer zero-touch enrollment, are listed below. This list will be updated as more partners implement the service.

Company name Region
Acer Global
Atea Nordics
CDW United States
Cloudpoint Nordics
Comm2ig Nordics
CTL United States,
Europe
Dell Technologies Global
Econocom France
Edunet Australia
Getech United Kingdom
HP Inc. Global
Insight United States
Learning with Technologies Australia
Lenovo Global
SHI United States
Synnex

United States,
Australia

Troubleshooting zero-touch enrollment

Issues during Chrome OS zero-touch enrollment can be caused by a number of things. Here are some potential issues you might encounter and how to resolve them.

Device isn’t listed as Pre-provisioned in the Admin console

Contact your pre-provisioning partner to ensure they used the correct pre-provisioning token, domain, and device information. If they have, contact support for further assistance.

Device isn't identified as eligible for zero-touch enrollment and doesn’t enroll

Verify devices have been pre-provisioned and are capable of zero-touch enrollment by pressing Alt + V during the initial device setup.
Contact support for further assistance.

Device enters the zero-touch enrollment flow but fails to enroll

If there are not enough Chrome Enterprise Upgrades available, you will see the error Not enough upgrades. Contact your reseller to purchase more Chrome Enterprise Upgrades.

Chromebook Enterprise devices include a Chrome Enterprise Upgrade associated with the device and do not use a separate Chrome Enterprise Upgrade for enrollment. If you have a Chromebook Enterprise device and are seeing this error, contact the device manufacturer for assistance.

Device is stuck on the manual enrollment screen

If the device is identified as eligible for zero-touch enrollment but fails to enroll, a manual enrollment screen is displayed. To one of the following:

Was this helpful?
How can we improve it?
Search
Clear search
Close search
Google apps
Main menu
Search Help Center
true
410864
false