Technical Bulletin - System Requirement Policy Reminder

Published: April 19, 2023

What is happening?

Pearson support is aware that students assigned managed Chrome devices (typically Chromebooks - do they use any other kind of ChromeOS device?) can bypass security settings by performing a series of complex processes that include resetting the device to factory settings (powerwashing or wiping) and then reconfiguring the device as unmanaged. Pearson does not support unmanaged Chromebooks for secure testing. Google is working to resolve this issue, and Pearson is monitoring the status of that resolution. Pearson is also working on an update that will check a device's managed status prior to testing. (In App Check? at sign in? perhaps we stay vague for now.)

What does this mean?

To prevent students testing on unmanaged (non-secure) ChromeOS devices:

• Technology personnel (or proctors) must check the managed status of each device before testing.
• Technology personnel must also ensure that each device is set to force re-enrollment as a a managed device after it's wiped (do we want to use this term or keep the wording "reset to factory settings"? The Chrome UI says both powerwash and wiping) and restarted for reuse.

Instructions for both processes below. 

What do I need to do (and how do I do it)?

To check the managed status of each device:

1. When the student turns on the ChromeOS device, check the screen where the account icon appears.
2. Below the account icon and the start arrow, a managed device displays the managed device icon ()and typically information on that management. The example below shows Chromebook managed by your-domain_here. (I doctored this screenshot as much as possible, but may replace with better one)
   
   

To set to force re-enrollment as a a managed device:

1. Sign in to your Google Admin Console and select Devices > Chrome > Settings > Device.
   
2. Select or search for the organizational unit you want to apply these settings to. The example below shows Pearson as the intended organization. Your organization will be a district or school.
   
   
3. In the Forced Re-enrollment section, select either of the options below:
   - Force device to automatically re-enroll after wiping.
   - Or, Force device to re-enroll with user credentials after wiping.
   

_{Tiny link: https://support.assessment.pearson.com/x/JwD5BQ}