SchoolProtect - HTTPS Decryption Installing Certificates on Chrome OS

If you are planning to deploy certificates on Chrome OS devices:

Download the certificate from the link above.
Log into your Google Admin console: admin.google.com
Go to Menu and then Devices > Networks.
Go to Certificates.
Leave the top organizational unit selected to apply the certificate to all Chrome devices.
Click Create certificate.
Enter a name for the certificate, e.g. “LGfL Decryption Certificate”
Click Upload and select the certificate downloaded from the above link.
Tick Enabled under Chromebook.
Click Add.

This will now deploy the certificate to all enrolled devices.

Please note: Chromebooks must be set up on a policy or IP range that does not have HTTPS decryption enabled. Once they have been enrolled into the Google Admin Console, they can be connected to the network with HTTPS decryption enabled. You can set up an IP exclusion in SchoolProtect that you can use to allow devices to be enrolled and pick up the certificate.

More information about deploying certificates to ChromeOS devices can be found here: Set up TLS (or SSL) inspection on Chrome devices.