Chrome OS scanning requirements

To be able to scan your Chrome OS (e.g. Chromebook) devices with Lansweeper, you will need to make sure that they meet the scanning requirements. This article describes these requirements, and how to setup the required project and credential. More information on how to scan your Chrome OS devices can be found in this article.

Chrome OS scanning requirements

To perform Chrome OS scans, the following requirements must be met:

  • Your Lansweeper installation must be version 7.2 or higher.
  • Your Lansweeper license must support Chrome OS scanning.
  • Your Lansweeper scanning server must have access to the Internet.
  • You need to have access to the Google admin console that manages your Chrome OS devices.
  • You need a G Suite, educational or governmental license to configure and use the API.
  • You need to have a project that has the Admin SDK enabled, and a credential that has access to the necessary scopes. Detailed instructions on how to configure this can be found below.

Configuring your Google environment for scanning

The below steps help you set up a project and configure an account that has access to the resources Lansweeper queries. If you're already using Google APIs, you can choose to use existing projects, service accounts and/or credentials. Make sure that the Admin SDK API is enabled on the project you're using, and that the service account you're using has access to the necessary scopes in the organization you wish to scan, as defined in step 4 of this article.

Step 1: enable the API

In your Google admin console, navigate to the Security section. Under API reference, check the Enable API access box and click Save

Enable the API

Step 2: create your project

On your Google cloud console page, click the dropdown in the title bar and select new project in the resulting pop-up. Give your project a name, select the location and click CREATE

Select a project

Create new project

Create project

Step 3: enable Admin SDK for your project

Go to your Google developers console page. Make sure your project is selected and click ENABLE APIS AND SERVICES. Search for the Admin SDK API and select it. On the Admin SDK API page, click ENABLE.

Select enable APIs and services

Search for Admin SDK

Enable Admin SDK

Step 4: create a service account for your project

On your Google cloud console page, make sure your project is selected and navigate to the Service accounts menu under IAM & admin. Click the CREATE SERVICE ACCOUNT button. Provide a name, modify the ID and description if you want, and click CREATE.  Click CONTINUE and then DONE. Click the Actions icon, select Edit and copy the service account's unique ID.

Navigate to service accounts

Create new service account

Create service account

Show client ID

Copy client ID

Step 5: configure the scope of access for your service account

In your Google admin console, navigate to the Security section and click Manage API client access under Advanced settings. Under client name, enter the unique ID of your service account. Under One or More API Scopes, enter the below string and click Authorize:
https://www.googleapis.com/auth/admin.directory.orgunit.readonly, https://www.googleapis.com/auth/admin.directory.device.chromeos.readonly

manage API client access

authorize scopes

Step 6: create your API key

When you create a credential, a file is downloaded containing a JSON string. The JSON string can be used to access all scopes that the service account has access to, and cannot be recreated. If you lose the file, you will need to create a new key.

On your Google cloud console page, make sure your project is selected and navigate to the Service accounts menu under IAM & admin. Click the Actions icon next to the service account you wish to use, click Create key, select JSON from the dropdown and click CREATE. The JSON key is required to submit your Chrome OS scanning target, as described in this article.

click create key

create key

Related Articles