Discussions

Hello,I’m trying to deploy certificates on Chromebooks for wifi connexion.  I’m lost in Google documentations, it’s a big labyrinth.  They seem to have change the manner to do and doc is not up to date.  I already built a environment PKI with Intune NDES/SCEP server and all is working great.  But for Google it’s another thing.  So if anyone have up to date (2026) docs, it would be appreciated.Here are some questions that might help me:Is Google Cloud Certificate Connector act as an application proxy?  Or we have to put our NDES/GCCC server in DMZ?Is Pub/Sub on Google Cloud Project is mandatory?​​​​​​​How to confiugre SCEP for chromebook, options for SCEP Secure are not available anymore.Is all the config for certificates like device id etc is in the config connector file? Thank you   

 Hi everyone,If you've been exploring ways to modernize your virtual application delivery, we've got a rather handy new resource for you.An independent, third-party evaluation has just been published by IDC. This paper takes an in-depth look at how Cameyo helps organizations move forward strategically. Whether you are already running Cameyo or are currently mapping out your cloud-first strategy, this third-party analysis serves as an excellent asset to share with your leadership teams.You can read the complete, independent evaluation here.Let's DiscussAre you exploring ways to bring modern security controls or AI tools (like Gemini) into your legacy, non-cloud workflows?   If you’ve already integrated cloud-first application streaming, what modernization benefits have stood out the most to your IT teams?   What are your thoughts on moving toward a web-first workspace by delivering specific applications directly to the browser, rather than virtualizing entire desktops?We’d love to hear

Environment:- We have a public-facing SCEP server (RFC 8894 compliant)- SCEP server is accessible via HTTPS from the internet- We successfully use this SCEP server for Intune and JAMF device enrollment- We're trying to extend it to ChromeOS devicesOur Approach:Instead of deploying GCCC (Google Cloud Certificate Connector), we want to:1. Configure SCEP CA Connection in Google Admin Console → directly point to our SCEP endpoint2. Create SCEP Profile Configuration in Google Admin Console3. Have ChromeOS devices call our SCEP server directly (similar to how Intune/JAMF devices do)Our Question:Is it possible for ChromeOS devices to enroll certificates via SCEP directly to an external SCEP server WITHOUT using GCCC? Specifically:- Will ChromeOS devices make direct HTTPS calls to a custom SCEP endpoint?- Are there any security policies or platform limitations that prevent this?- If supported, what's the recommended configuration in Google Admin Console?Context:- Our SCEP server is public-faci

Does Cameyo support applications that are in the Microsoft MSIX format?

اريد اصل لعدم الاجهزه للدخول في خصوصياتي ولا اريد اي مشاركه مع اي اجهزه اخرىوحذف الشروط والحكم للصابق  

I have a batch of chromebooks that an organization donated to my robotics team. The organization is still operating, but they had an enterprise set up for these chromebooks, and they were locked to that enterprise. The enterprise no longer exists (they aren't paying for it). I have complete permission to repurpose these chromebooks, but neither us nor the donor has any idea how to remove the lock on that organization! We can't even log in because it requires a login domain that no longer exists. How can we deprovision these chromebooks? I've tried the "Super Powerwash", including disconnecting the battery and discharging the system. Nothing has worked, it keeps coming up with a requirement to log in with a defunct account. Any pointers to who we might contact at google, I have full cooperation from the actual owners of these devices! Maybe there is a way to temporarily reactivate the enterprise to decommission them?

I’ve been coding and developing my portfolio website and decided to add gifs that loop to a couple of my webpages. When I tested my website using Google Chrome, I got a broken gifs image. But when I tested on other browsers like Safari and DuckDuckGo, the gifs seem to work just fine. I’ve checked the code for errors over and over and have not been able to find any. So I decided to push my website live in hopes that the issue would get resolved. But the issue still persists. I’ve researched and have tried resetting and updating my Google Chrome browser extension and even updated my computer for the latest iOS updates. But none of that has worked, and I’ve come to realize that the gifs don’t work on any of the Google chrome browsers that I’ve used. I’ve used the Google Chrome browser on friends and family desktop computers to see if the gifs work with no success. So I know it’s not my personal Google Chrome browser settings or computer. Can someone please help!?

Hi everyone, We are excited to announce an opportunity to join a new Trusted Tester (TT) program for a high-priority recovery feature: Locate Disabled ChromeOS Devices. Managing a fleet of devices is simple until one goes missing. This first-party solution provides IT administrators with a built-in way to track lost or stolen hardware without relying on third-party extensions. What is the Feature?Currently, finding the physical location of a lost Chromebook requires complex workarounds. This new feature allows administrators to capture the approximate geolocation (via Wi-Fi/Cellular signals) of a managed device only after it has been disabled.This pilot allows you to:Trigger Remote Location: Use a native "Locate" command directly from the device details page in the Admin Console. Maintain Privacy: Tracking is strictly tied to "Disabled" mode—admins cannot track active users, and a lock screen notification informs users when location is being accessed. Automate Recovery Alerts: Configur

HiWondering if anyone can suggest a decent text file editor for ChromeOS.  Was using TEXT, but looks like it's been withdrawn from the play store.  Tried Notepad Next under Crostini but it keeps crashing on me.  I just need to be able to create/edit txt and json files.Thanks

Hi everyone, We’ve just published a new guide in our Cameyo Best Practices section: Best Practices for joining Cameyo servers to a domain/AD.This resource is designed to help you streamline your environment setup. A couple of key highlights include:Organizational Unit (OU) Management: Why it's critical to use a dedicated OU for your Cameyo servers to avoid conflicting Group Policy Objects (GPOs). Security Groups: Recommendations on using specific AD groups to manage user access and permissions more effectively within your virtual sessions.Quick question for the community: Are you currently using a separate OU for your Cameyo instances, or have you found another method that works best for managing GPO inheritance in your environment?You can find the full guide here for all the details: Best Practices for joining Cameyo servers to a domain/AD.Looking forward to hearing your thoughts! 

With regards to the LTS channel for ChromeOS and the most recent major update 144 - does it patch cve-2026-5281 (most recent zero day exploit)

Hi everyone, In a distributed workforce, any data sitting on a local hard drive is a liability you can't always see. While ChromeOS is built with industry-leading encryption, moving toward a "non-data-bearing" model takes your security posture to the next level by ensuring the local disk remains nothing more than a temporary, encrypted pass-through.By redirecting downloads, screenshots, and documents directly to the cloud, you can centralize control and apply consistent Data Loss Prevention (DLP) and retention rules across your entire fleet.Why go non-data-bearing?Centralized Control: Move local files under the umbrella of Google Drive or OneDrive management. Seamless UX: Users get a familiar "Downloads" experience, but with the peace of mind that their work is instantly backed up and accessible from any device. Reduced Risk: Minimize the impact of lost or stolen hardware by ensuring no sensitive data lives on the physical machine.We’ve just published a comprehensive resource in our Ge

All our other devices can connect fine but some chromebooks, just won't let you get on to the Wi-Fi unless you try login using the guest account. We use smoothwall at our school with unifi aps but I don't think this is the problem.

Hi All,I have asked Gemini already so have the recommended 3 options but,If hypothetically we had an Analyst transfer a leavers data to an incorrect internal person within our Workspace, is the only realistic option to transfer the data back to the correct person to use the investigation tool and then transfer the data in bulks of 300 at a time over to them?Gemini did say GAM can be used ‘or’ transfer all data using the tools within Admin but it looks like both of these options would move all of the data from the person it was transferred to not just the incorrectly transferred files?

Hi everyone, As promised, we close the circle of the recent Cameyo webinars with the Q&As related to the one held in December. To access those related to the February and March webinars, please click on the respective hyperlinks.As per last posts in this series, we want to ensure you have all the information you need so we've compiled this comprehensive Q&A recap. Also, if you have any further questions related to the webinar, please feel free to drop them in the comments below. 🛠️ Product Overview & AvailabilityWhat is Cameyo by Google?Cameyo is a virtual application delivery platform that allows you to run Windows applications securely within a web browser. It’s designed to bridge the gap for "last-mile" legacy applications while maintaining a web-first strategy. What are the core benefits?Simple: Easy to deploy and manage. Secure: Built on Zero-Trust principles; no VPN required. Cost-Effective: Reduces infrastructure overhead and hardware requirements. Flexible: Compati

Hi all,After the recent success of the Cameyo webinar series here in the community (not to mention all the super useful content that it yielded), we thought that we should ask you about which themes are you looking forward the most to be the focus of our next webinars in 2026. Our goal is for them to be aligned with your organization’s deployment goals so that we bring the right experts to the table.We’ve identified six key areas of focus based on recent trends we observed here on the community. Please pick the topic you would find most valuable for upcoming sessions below. If you’d like to see more than one of the themes below being discussed, or have any other suggestions for future topics, feel free to drop a comment with them and we will certainly take them into account for the subsequent events.

I have been upgrading older laptops to Chrome OS Flex for people who’s laptops software is now considered obsolete. I have been doing this for about 3 years now and I would like to get in touch with someone at Google to run a program at the community library or something like that to more/less get their blessing on it.  Since they have a BYOD program where back market gets users to pay for a USB key, I am hoping they would like this idea.

We are experiencing an issue where the ImportSavedPasswords Chrome policy set to FALSE with POLICY_MODE_MANDATORY is not disabling the "Import passwords" option in the Chrome Password Manager UI.Steps to Reproduce:1.In Google Admin Console, navigate to Devices > Chrome > Settings > Users & browsers2.Select the Backend OU under Bigfix_MCM_OU > MCM > DEV3.Set Import Saved Passwords → Disable imports of saved passwords4.Set User override → Do not allow users to override this setting5.Save the policy6.On a Chrome browser signed in with an account belonging to the Backend OU, navigate to chrome://policy and click Reload policies7.Navigate to chrome://password-manager/settings Observed Behavior:1.The "Import passwords" row remains fully visible and functional under chrome://password-manager/settings2.The "Select file" button is clickable and opens a file picker dialog3.Passwords can still be imported via CSV despite the policy being set to FALSE with MANDATORY enforcement 

Hello everyone!Following up on our recent March webinar Q&A recap, it’s time for the February edition (and soon enough the December recap will come too)! To make sure no stone is left unturned, we've gathered all the questions asked during the first session of the year and categorized them below for easy reference.As usual, if you're still curious about a specific feature or use case, please feel free to drop your thoughts in the comments below!🖥️ Cameyo & Device CompatibilityDoes Cameyo work with ChromeOS Flex?Absolutely. It is fully compatible and performs excellently on ChromeOS Flex devices. Is USB Passthrough supported on Cameyo?We support the WebUSB API, which allows many peripherals to function seamlessly. However, devices that require silent driver installations on Windows or specific hardware encryption keys may not be compatible at this time.Can I use hardware devices like Smart Cards?While WebUSB supports many printers and scanners, redirected support for encrypted

Hi all,As teams continue to modernise their environments, app delivery often sits right at the centre of the conversation.For some organisations, traditional VDI is still the right fit — especially where full desktop access, strict isolation or legacy workflows are required. But for others, there’s a growing shift towards web-first and native app approaches, where most day-to-day work happens directly in the browser or via PWAs on ChromeOS.More recently, we’ve also seen increased interest in Virtual App Delivery, where specific legacy or Windows apps are delivered to users without streaming an entire desktop. Solutions like Cameyo by Google are designed to support that middle ground — keeping access to critical apps whilst reducing the overhead and complexity often associated with full VDI environments.None of these approaches are inherently “right” or “wrong”, and many teams end up using a mix depending on user needs, security requirements, and scale.Which approach (or combination of