Setting up Chromebook

The new Inspera Assessment Lockdown Browser is only supported on managed Chromebooks and it requires Player version 3.47.0 or higher.

With Google’s scheduled phase-out of the native Kiosk application on Chromebooks by October 2028, Inspera is introducing a new Progressive Web Application (PWA) to provide a secure and uninterrupted testing environment. This new application will ensure a seamless experience for test-takers while maintaining a lockdown environment similar to the existing Kiosk app.

Actions for the Google Admin Console administrator (IT department)

The Google Admin Console administrators for each customer must make the new application available on managed devices for test takers. Required actions for administrators are listed below:

Log Into Admin Console: Access the Admin console for your organization.
Navigate to Devices: Select Devices from the left panel on the landing page.
Select Chrome: Expand the Chrome option.
Access Apps and Extensions: Click on Apps and Extensions.
Go to Kiosks: In the top panel, select the Kiosks tab.
Choose Organizational Units: If you manage multiple accounts, you should select the correct account under Kiosk mode accounts.
Add by URL: Click Add and select Add by URL. A new popup window will appear.
Enter the URL: Paste the URL of the new PWA Application and click on Save.

Inspera will be removing support i.e. no further development will be done and resolution of bugs or issues will not be done from May 2025 on the native Kiosk Application. Kindly move to the PWA application as soon as possible for a seamless test-taker experience.

Additional available configurations

How to install Companion Extensions
1. Go to the Google Admin console and click on the PWA app installation for on the environment and scroll down to Add Extension → Add from a custom URL.
2. Select From a custom URL and enter:
  - Extension ID
  - The URL to the updated XML for the extension
3. Setting Allow enterprise Challenge needs to be enabled on the settings for this Companion Extension.

Enable candidate to exit PWA manually

For candidates to exit the PWA Chromebook App manually, Google admin Console administrators need to install the following extensions:

Custom URL to use	Extension Id
https://d133zon9jtcf53.cloudfront.net/ia-chromeapp/kiosk-device-ops-extension/releases/latest/kiosk-device-ops-extension-update.xml	ocdnbndkdgbmfogeiiibfkkglgonpcko

The above extension ensures that the test taker can exit when they are online. Test takers won’t be able to exit by clicking on the Exit button if they are offline, even if this extension is installed.

Stricter Kiosk Check Verification

To ensure PWA uses stricter Kiosk check verifications i.e PWA understands that the test designated to use Chromebook Kiosk is running inside Chromebook Kiosk only, ensure the following steps

Install the following companion extension. Refer the steps in the first part of the document How to Install Companion extensions

Custom URL to use

Extension Id

https://d133zon9jtcf53.cloudfront.net/ia-chromeapp/kiosk-mode-verificator-extension/releases/latest/kiosk-mode-verificator-extension-update.xml

colcojdppcfhidiandmjghohogfcjekf

Devices → Chrome → Settings → Device Settings → Verified mode

Whitelist the Kiosk Mode Verification Service Account in the institution in the Google Admin console.
1. Go to
2. Scroll down to the Configuration section here and add the following service URLs inside Services with full access:
  pwa-kiosk-mode-verificator-pro@majestic-parity-452209-j8.iam.gserviceaccount.com
Whitelist this URL https://verifiedaccess.googleapis.com to prevent local network configurations from blocking them. This needs to be done in local network configurations where Chromebooks will be used and not in the Google admin console.
Note: This step to be done only after the previous steps have been completed.

Go to the Google Admin console and click on the PWA app installation for on the environment and scroll down to Managed Configuration. Add the following JSON in the Managed Configuration field for the PWA.
```
{
  "kiosk_checker": ["verified_access"]
}
```

Whitelist tenancies where Audio record question types will be used

Access to the microphone needs to be provided to make the Audio Record Question type Work seamlessly. You don’t need to whitelist every tenant domain in Inspera, only the tenant domains that candidates will use in their managed Chromebook devices. Institutions need to set this up only once.

The admin needs to perform the following steps:
- Select the intended Kiosk account, then click on the new PWA application. A panel window would appear at the right of the screen.
- Once the new pop-up window appears, scroll down to Additional URL Origins in the pop-up.
- Put all the domain IDs within the text field and click on save.
How to verify that a Companion Extension has been added to Kiosk Mode browser
- Create a managed devices group to contain only the managed device(s) that will be used for the technical inspection.
- Enable Troubleshooting tools only for that group of managed Chromebook devices (see how: Troubleshoot ChromeOS kiosk device - Chrome Enterprise and Education Help via Devices > Chrome > Settings > Device settings → Kiosk settings → Kiosk troubleshooting tools).
  1. Step 1: Kiosk app selection screen
  2. Step 2: PWA launched at Kiosk mode in a managed device member of that group.
  3. Step 3: Open a new Chrome window and access extensions Press Ctrl + N to open a new Chrome window while in the kiosk session. This action requires Kiosk Troubleshooting Tools to be enabled for the device via the Google Admin Console. Once the new window opens, click the Extensions icon in the Chrome toolbar and select Manage extensions.
  4. Step 4: View installed extensions on chrome://extensions.
  5. Step 5: Verify extension toggle status and version (both extensions).
    
    You can also use this video as reference: