Zero-touch enrollment

Chrome OS zero-touch enrollment is an alternative to manually enrolling devices, where a pre-provisioning partner (device manufacturer, distributor or reseller) sends instructions to Google to automatically enroll a Chrome device into a customer’s domain after a device is turned on and connected to the internet.

For a step-by-step guide, watch the following video:

Zero-touch enrollment requires:

  • A compatible Chrome device
  • A pre-provisioning token generated from the Google Admin console
  • An approved pre-provisioning partner to assist with enrollment

Generate a pre-provisioning token

A pre-provisioning token is a unique identifier generated in the Google Admin console, and is used for verification during device enrollment. It can be used for multiple devices and remains active until the admin revokes its use. A separate token can also be generated for each organizational unit.

To generate a pre-provisioning token:

  1. Sign in to your Google Admin console.

    Sign in using your administrator account (does not end in @gmail.com).

  2. From the Admin console Home page, go to Devicesand thenChrome devices.
  3. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.
  4. In the bottom-right corner, click Enroll devices ""
  5. A pre-provisioning token will be generated. You can choose to:
    1. Copy pre-provisioning token to clipboard ""
    2. Revoke token ""
    3. Revoke and regenerate token ""

Note: Be sure to provide both the pre-provisioning token and the device's enrolled domain to an authorized pre-provisioning partner to complete the zero-touch enrollment.

Manage devices in pre-provisioned status

A new device status, "pre-provisioned" has been added to the Device status filter in the Admin console. It lists Chrome devices that are ready to be zero-touch enrolled during initial device setup. While a device is in a “pre-provisioned” state, it can be moved to a different organizational unit or deleted. However, once zero-touch enrollment is complete, the device will become “Provisioned”.

Identify compatible Chrome devices

Not all Chrome devices are compatible with zero-touch enrollment. More devices will be added as they are announced. The table below lists devices that are supported currently:

Device manufacturer and model How to identify Attested Device ID
Acer Chromebook 311 (C733/C733U/C733T) Manufactured beginning January 1, 2021 Serial number
Acer Chromebook 311 (C722/C722T) All devices are zero-touch enrollment capable Serial number
Acer Chromebook 314 (C933) Manufactured beginning January 1, 2021 Serial number
Acer Chromebook 511 (C741L/C741LT) All devices are zero-touch enrollment capable Serial number
Acer Chromebook 512 (C851/C851T) Manufactured beginning January 1, 2021 Serial number
Acer Chromebook 712 (C871/C871T) Manufactured beginning December 11, 2020 Serial number
Acer Chromebook Spin 511 (R752T/R752TN) Manufactured beginning January 1, 2021 Serial number
Acer Chromebook Spin 511 (R753T/R753TN) All devices are zero-touch enrollment capable Serial number
Acer Chromebook Spin 512 (R851TN/R852T/R852TN) Manufactured beginning January 1, 2021 Serial number
Acer Chromebook Spin 512 (R853TA/R853TNA) All devices are zero-touch enrollment capable Serial number
Acer Chromebook Spin 513 (CP513-1H/CP513-1HL/R841T/R841LT) All devices are zero-touch enrollment capable Serial number
Acer Chromebook Spin 514 (CP514-1H/CP514-HH, CP514-1W/CP514-WH) All devices are zero-touch enrollment capable Serial number
Acer Chromebook Spin 713 (CP713-2W)  Manufactured beginning November 2, 2020 Serial number
Acer Chromebox CXI4 All devices are zero-touch enrollment capable Serial number
Dell Latitude 5300 2-in-1 Chromebook Manufactured beginning December 1, 2020 Service Tag
Dell Latitude 5400 Chromebook Manufactured beginning December 1, 2020 Service Tag
Dell Latitude 7410 Chromebook Manufactured beginning December 1, 2020 Service Tag
HP Chromebox G3 Manufactured beginning December 21, 2020 Serial number
HP Elite c1030 Chromebook Manufactured beginning October 7, 2020 Serial number
HP Pro c640 Chromebook Manufactured beginning October 19, 2020 Serial number
HP Pro c645 Chromebook All devices are zero-touch enrollment capable Serial number
Lenovo ThinkPad C13 Yoga Chromebook All devices are zero-touch enrollment capable Serial number

Authorized pre-provisioning partners

The partners who currently offer zero-touch enrollment, are listed below. This list will be updated as more partners implement the service.

Company name Region
Acer Global
CDW United States
Getech United Kingdom
HP Inc. Global
Insight United States
Lenovo Global
Synnex United States

 

Was this helpful?
How can we improve it?