Skip to content

Bulk install the extension using Google Enterprise Core

Learn how to install the extension to Google Chrome on Mac and Windows devices using Google Enterprise Core.

Requirements

Make sure you meet the following requirements:

  • You've enrolled the Chrome browsers on the Mac and Windows devices in Google Enterprise Core and assigned them to the required organizational unit. See Chrome Enterprise Core and Enroll cloud-managed Chrome browsers.
  • You have administrator access to the following devices and products:

    • Mac and Windows devices
    • Google admin console
    • Sophos Central

Download the installation files from Sophos Central

In Sophos Central, do as follows:

  1. Go to My Environment > Installers > Protected Browser.
  2. Under Browser extension, next to Google Enterprise, click the appropriate installer for your operating system.

    This downloads a .zip file. It includes the ExtensionSettings.json file. Extract the file to your device.

  3. Copy the extension ID and URL.

    Google Enterprise extensions files on the Installers page.

Install the Protected Browser extension on your devices

In the Google admin console, do as follows:

  1. Go to Chrome browser > Apps & extensions > Users & browsers.
  2. Select the organizational unit you created for your devices.
  3. In the bottom-right, click the plus icon , then click Add Chrome app or extension by ID.

    Add extension by ID option.

  4. In Extension ID, paste the extension ID you copied from Sophos Central.

  5. Select From a custom URL, and paste the extension URL you copied from Sophos Central.

    Enter the extension URL.

  6. Click Save.

  7. In Installation policy, click Allow install.

    Allow install option.

  8. Click Force install.

    Force install option.

  9. Go to Policy for extensions and upload the ExtensionSettings.json file you downloaded from Sophos Central.

  10. Click Save.
  11. Verify the installation as follows:

    1. On an enrolled device, open the Chrome browser.
    2. In the address bar, type chrome://policy and click Reload policies.

      In the Chrome Policies table, check if you can see the ExtensionInstallForcelist policy and its status is OK.

    3. In the address bar, type chrome://extensions and check if you can see the Protected Browser extension. You may see the following message:

      Sophos extension is installed and managed by the organization.

Install the extension utility

To use device posture policy objects in web policies, you must install the extension utility on users' devices. The .zip file you downloaded from Sophos Central includes the ExtensionUtility.exe installer for Windows devices and the ExtensionUtility.pkg installer for Mac devices. Run this installer directly on each device on which you've installed the extension.