How to configure single app kiosk mode on ChromeOS devices using Hexnode UEM?

This document guides IT administrators in configuring single app kiosk mode on ChromeOS devices using Hexnode UEM.

Single App Kiosk mode in Hexnode UEM locks a device to a single application, restricting all other functionalities. This focused environment helps minimize distractions and enhances productivity.

On ChromeOS devices, Hexnode enables administrators to lock down devices to a single kiosk-supported application sourced from the Chrome Web Store or added as a web app through Hexnode’s app inventory.

Using the Single App Kiosk policy, admins can configure the kiosk settings and the auto-launch behavior of the selected kiosk application. Kiosk lockdown configures the device to be fully dedicated to its intended purpose, offering a secure and distraction-free experience.

Set up Single App Kiosk on ChromeOS devices

To enable Single App Kiosk mode for ChromeOS devices, follow the steps mentioned below.

1. Navigate to the Policies tab on your Hexnode UEM portal.
2. Choose an existing policy or create a new one by clicking New Policy.
3. If creating a new policy, provide a suitable name.
4. Select Kiosk Lockdown.
5. Under ChromeOS Kiosk Lockdown, select Single App and click Configure.
6. Click the + icon on the mobile screen and choose the app to run in kiosk mode. You can select from the following app types:
   1. Chrome Web Store:

      Add a kiosk supported Chrome Web Store app using its name and App ID. To get the App details:

      1. Log in to the Google Admin Console.
      2. Go to Devices > Chrome > Apps & extensions.
      3. Select the Kiosks tab. Click the + icon and choose the Chrome logo to open the Chrome Web Store.
      4. Select Top Chrome Apps for Kiosks to view supported apps.
      5. Choose your desired app and click Select in the top-right corner.
      6. You’ll be redirected to the Google Admin Console where the app and its 32-character App ID will be listed.
      7. Copy the App ID and App name, then paste them into the Hexnode console.
      8. Click Add.
         
   2. Web Apps:

      Web apps added to Hexnode’s app inventory can be set up in Single App Kiosk mode. Choose the desired app and click Select.

7. Once an app is selected you will have the following options to customize,
   
   App Settings

   Setting	Description
   Auto launch app	Enable this option to automatically launch the kiosk application immediately after the device boots, bypassing the login screen.
   Power management	Allow the kiosk application to access and manage the device’s power settings.
   Unified desktop	Enable this option to allow the kiosk application to be used with a unified desktop environment.
   Virtual keyboard	Enable this option to allow the use of a virtual keyboard while the kiosk application is running.
   Plugins	Enable this option to allow plug-ins to be used within the kiosk application.
   Function keys	Enable this option to configure the first row of the keyboard to function as standard function keys (F1–F12).

   Auto-Launch Kiosk App Settings

   Setting	Description
   Device health monitoring	Enable this option to allow the device to monitor the health of the kiosk app. The administrator will be notified via email or text message if the app crashes.
   System log upload	Enable this option to send system logs to the management server for diagnostics and troubleshooting.
   Screen rotation	Set the screen orientation for displaying the kiosk application. Available options include: 0 degrees 90 degrees 180 degrees 270 degrees User defined (default)
   Auto login bailout	Enable this option to allow users to exit kiosk mode using the shortcut Ctrl+Alt+S, returning them to the login screen.
   Prompt for network when offline	Enable this option to prompt users to connect to a network if the device is offline when the kiosk application launches.

Associating the policy to Organizational Units (OUs)

Policies cannot be directly associated with ChromeOS devices; they can only be applied through Organizational Units (OUs). To associate a policy with ChromeOS devices,

To associate a ChromeOS policy to the devices upon configuration,

1. Navigate to Policy Targets > Domains/OUs.
2. Click on +Add Domain/OUs. From the list, select the Google Workspace account integrated with Hexnode, indicated by the (Google) tag.
3. The parent OU will be listed here and is indicated with a briefcase icon to differentiate it from domains.
4. Click the dropdown next to the parent OU to view its child OUs. Select the required Organizational Units and click OK.
5. Note that a policy assigned to a parent OU will automatically apply to all its child OUs. Associate the policies to the OUs to which the target devices are assigned.
6. Click Save to associate the policy to the devices under the selected Organization Units.