Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=protected-browser-extension-install-manually-windows-devices

Install the extension on Windows devices manually

You can install the Sophos Protected Browser extension manually on the Google Chrome, Comet, and Microsoft Edge browsers on your Windows devices.

Requirements

Make sure you meet the following requirements:

  • Your Windows devices are managed devices. The browser can't deploy the extension unless the device meets at least one of the following requirements:

    • Joined to an Active Directory domain.
    • Joined to Microsoft Entra ID.
    • Managed by Microsoft Intune or a similar Mobile Device Management (MDM) solution.

    The Protected Browser extension isn't hosted in an official web store. Manual installation uses browser policies and Windows registry keys to install the extension directly from Sophos. For security reasons, browsers allow this installation method only on managed devices. You can't manually install the extension on a device that the browser doesn't consider managed.

  • You have administrator access to the following devices and products:

    • Windows devices
    • Sophos Fusion

Download the installation files from Sophos Fusion

In Sophos Fusion, do as follows:

  1. Go to My Environment > Installers > Protected Browser.

  2. Under Browser extension, next to Manual, click Windows.

    This downloads a .zip file. It includes the installation files for the Google Chrome, Atlas, Comet, and Microsoft Edge browsers.

  3. Extract the file to your device.

Install the extension on Windows devices

On the Windows device, do as follows:

  1. Go to the folder where you extracted the installation files and double-click the force installation file for your browser.

    For example, for Chrome, double-click ChromeForceInstallExtension.reg and click Run and Yes in the subsequent prompts to complete the installation.

    This updates the Windows registry with the extension details.

  2. Double-click the extension settings file for your browser.

    For example, for Chrome, double-click ChromeExtensionSettings.reg and click Run and Yes in the subsequent prompts to complete the installation.

    This updates the Windows registry with the extension settings.

  3. Double-click the ExtensionUtility.exe file and click Yes in the confirmation prompt.

    This file is common for all browsers.

    Tip

    You must install the extension utility if you want to create web policies with device posture policy objects.

    This completes the installation and setup of the Protected Browser extension on your browser.

    Users are prompted to sign in with their credentials before they can use the extension.

Uninstall the extension

The .zip file you downloaded from Sophos Fusion has an uninstall folder. In that folder, double-click the ExtensionUninstaller.reg file to uninstall the extension from a Windows device.

To uninstall the extension utility, run the following PowerShell command:

powershell.exe -Command "& { msiexec /q /x $((New-Object -ComObject 'WindowsInstaller.Installer').RelatedProducts('{B0D532EB-39A8-497B-8DD8-6A3ACCE97532}')); }"