topic Re: Chromebook using always on, asks to install a certificate. in General Topics

Chromebook using always on, asks to install a certificate.

rnicic — Mon, 01 May 2023 21:20:10 GMT

We are trying to connect our Chromebooks to GlobalProtect using always on. The Chrombooks are managed by The Google Admin Console. We are pushing the certificate as described by google. On connect GP askes to install a certificate. If I cancel then it says the cert in not found or invalid. If I try to install a cert there is not anything on the Chromebook.

We spoke with Google support. They looked at the config and didn’t find any issues. They believe there should be additional application config and referred us back to palo. Is anyone using a Chromebook with GP always on that can give me any ideas on what to try?

Re: Chromebook using always on, asks to install a certificate.

BPry — Tue, 02 May 2023 13:10:33 GMT

@rnicic,

Have you reviewed the GUIDE on how to accomplish this? It's been a while since I helped a school set this up, but it was a fairly straightforward process just following the guide and getting the certificate aspect sorted. The only thing to really take note of that was special was that GlobalProtect for Chrome and the GlobalProtect for Android does encounter a whole host of issues if they're both installed at the same time on the same device.

If you're getting a certificate installation prompt as soon as you connect, do you have trusted root CAs being installed from the Portal?