Deploy auto-updates for Chrome devices
This document describes best practices for IT administrators managing auto-updates of Chrome devices.
The following topics and recommendations are discussed:
- Default auto-updates—Recommended
- Scattered updates—Recommended if bandwidth is an issue
- Pinning devices—Not recommended
- Support Considerations
- Guidelines for changing default settings
By default, Chrome devices update to the latest version of Chrome when it’s made available. There’s a new release of Chrome approximately every 6 weeks and in addition to these major releases, there may be security fixes or software updates that go out more frequently. We recommend that the administrator keep the default auto-update settings for Chrome devices in the Google Admin console to auto-update when the new release hits the Stable Channel.
Beginning with Chrome devices on Chrome version 40 or later, when possible, Chrome devices will use a peer-to-peer (P2P) auto-update behavior that allows faster update of Chrome devices from nearby devices instead of downloading the update from Google's servers or an intermediate caching proxy, if you have one set up. If peer-to-peer auto-updating fails or is not possible on your network, devices will update through normal channels.
Scattered updates—Recommended if bandwidth is an issue
The average full Chrome OS software update is 400 MB and minor updates are approximately 50 MB. If your organization is deploying thousands of Chrome devices, or if you have network bandwidth considerations, you may consider scattering updates. We recommend that if you scatter updates to choose the fewest days possible (such as over two or three days), because if you choose to scatter updates over a two-week period, it’s possible that some of your users could fall more than one version behind.
Organizations should create a test plan and test each new Chrome release on 5% of your organization's devices by keeping them on the Chrome OS Beta Channel. You can do this using the Release Channel setting. Using the Beta Channel gives your IT personnel a 6-8 week window to see if any issues arise with the latest version in your organization before it’s released to the Stable Channel. Additionally, we recommend you keep your IT team on the Beta or Dev channels to test each version of Chrome OS in your organization before it hits the stable channel.
Pinning Devices—Not Recommended
We recommend users be on the latest version of Chrome, but we understand that some organizations may want to pin their users if they have special requirements or find a critical issue while testing devices on the Beta Channel. However, version pinning should be avoided if possible, because if you forget to unpin your users’ devices, they can fall behind on critical security updates and miss out on new features in Chrome. If you need to pin versions, see Restrict Google Chrome version to at most.
Google Cloud supports only the latest version of Chrome OS.
Guidelines for changing default settings
For enterprise users, the Admin console provides multiple controls to manage the updates on their devices. For specific tips on how to configure the settings, see the auto update settings in Manage device settings.