Last updated: July 24, 2026

How to enroll Chrome Browsers in Chrome Enterprise using MDM?

MacOS

Enrolling Chrome Browser in Chrome Enterprise using ManageEngine MDM on macOS involves creating a custom configuration profile and pushing the token file to your managed devices. Here's a general guide on how to do it:

• Obtain the Chrome Enterprise Token
• Create a configuration profile
• Add a custom configuration
• Specify the token file
• Deploy the configuration profile

Steps

• Obtain the Chrome Enterprise Token:
  Authorized partners: To be able to generate the enrollment token, your customers first need to accept the Chrome Browser Cloud Management License Agreement.
  1. Sign in to your Google Admin console using an administrator account.
  2. In the Admin console, go to Menu > Devices > Chrome > Managed browsers. If you signed up for Chrome Browser Cloud Management, go to Menu > Chrome browser > Managed browsers.
  3. At the top, click enroll.
  4. Click copy enrollment token to clipboard.
  5. Click done.
• Create a configuration profile:
  Login to ManageEngine MDM and navigate to Device Management > Profiles.
  Sample XML:

<?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

<key>PayloadContent</key>

<array>

 <dict> 

        <key>CloudManagementEnrollmentToken</key> 

        <string>XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX</string> 

        <key>CloudManagementEnrollmentMandatory</key> 

        <true/> 

        <key>PayloadEnabled</key> 

        <true/>

        <key>PayloadDisplayName</key> 

        <string>Chrome Browser Settings</string> 

        <key>PayloadIdentifier</key> 

        <string>com.google.Chrome.5F15308F-877A-4F25-916B-948E771D8128</string> 

       <key>PayloadUUID</key> 

        <string>8EBD3676-7C77-4FEE-9E78-C00EA0A0B5C3</string> 

        <key>PayloadType</key> 

        <string>com.google.Chrome</string> 

        <key>PayloadVersion</key> 

        <integer>1</integer>         

    </dict> 

</array>

<key>PayloadDisplayName</key>

<string>ChromeEnrollmentConfig</string>

<key>PayloadIdentifier</key>

<string>E85645C9-C397-43C7-92B0-0ED10A258025</string>

<key>PayloadRemovalDisallowed</key>

<false/>

<key>PayloadType</key>

<string>Configuration</string>

<key>PayloadUUID</key>

<string>044C99C9-0016-4963-A599-1974F7EC6B39</string>

<key>PayloadVersion</key>

<integer>1</integer>

</dict>

</plist>   

iOS

Enrolling Chrome Browser in Chrome Enterprise using ManageEngine MDM on iOS involves modifying the app configurations and pushing the token file to your managed devices. Here's a general guide on how to do it:

• Obtain the Chrome Enterprise Token
• Find the app in app repository
• Add the app configuration
• Specify the token file
• Deploy the configuration profile

Steps

• Obtain the Chrome Enterprise Token:
  Authorized partners: To be able to generate the enrollment token, your customers first need to accept the Chrome Browser Cloud Management License Agreement.
  1. Sign in to your Google Admin console using an administrator account.
  2. In the Admin console, go to Menu > Devices > Chrome > Managed browsers. If you signed up for Chrome Browser Cloud Management, go to Menu > Chrome browser > Managed browsers.
  3. At the top, click enroll.
  4. Click copy enrollment token to clipboard.
  5. Click done.
• Find the app in the App Repository:
  Search for the app in the App Repository.
• Add the app configuration:
  Modify the App Configurations.
  Sample XML:

 <?xml version="1.0" encoding="UTF-8"?>

<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">

<plist version="1.0">

<dict>

    <key>CloudManagementEnrollmentToken</key>

    <string>XXXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX</string>

</dict>

</plist> 

Android

Enrolling Chrome Browser in Chrome Enterprise using ManageEngine MDM on Android involves modifying the app configurations and pushing the token file to your managed devices. Here's a general guide on how to do it:

• Generate the enrollment token
• Add the app to App Repository
• Assign the enrollment token to the app

Steps

• Generate the enrollment token:
  1. Sign in to your Google Admin console using an administrator account (does not end in gmail.com).
  2. In the Admin console, go to Menu > Devices > Chrome > Managed browsers. If you signed up for Chrome Browser Cloud Management, go to Menu > Chrome browser > Managed browsers.
  3. At the top, click enroll.
  4. Click copy enrollment token to clipboard.
  5. Click done.
• Add the app to App Repository:
  To add the app to App repository, follow these steps.
• Assign the enrollment token to the app:
  
  1. Go to app configurations.
  2. Paste the enrollment token in its respective field generated in Step 1.
  3. Click Save.

Frequently asked questions

Where do I get the Chrome Enterprise enrollment token?

Sign in to your Google Admin console as an administrator, go to Devices > Chrome > Managed browsers (or Chrome browser > Managed browsers if you signed up for Chrome Browser Cloud Management), click enroll, then copy the enrollment token to your clipboard.

How is Chrome enrolled on macOS devices through MDM?

Create a configuration profile under Device Management > Profiles containing a CloudManagementEnrollmentToken custom configuration with the enrollment token, then deploy the profile to your managed macOS devices.

How is Chrome enrolled on iOS devices through MDM?

Find the Chrome app in the App Repository, add the enrollment token through its App Configurations to specify the token file, then deploy the configuration profile to your managed iOS devices.

How is Chrome enrolled on Android devices through MDM?

Add the Chrome app to the App Repository, then paste the enrollment token generated from the Google Admin console into the app's configurations and save.