Overview
Endpoint Verification allows administrators to assess and monitor the security of devices accessing your organization's resources. Once deployed, it collects device signals such as OS version, disk encryption status, and screen lock settings, which can be used to enforce context-aware access policies.
Prerequisites
Administrator access to the Google Admin console with Service Settings privilege
Users in your organization are using Google Chrome 110 or later
Devices are running ChromeOS, macOS 10.11 (El Capitan) or later, Windows 10 or 11, or Linux Debian/Ubuntu
Instructions
Step 1: Confirm Endpoint Verification is turned on
Sign in to the Google Admin console
Navigate to Devices > Mobile & endpoints > Settings > Universal
Click Data access > Device signals
Ensure Collect device signals using Endpoint Verification is checked
Click Save
Step 2: Install the Endpoint Verification extension
Navigate to Devices > Chrome > Apps & extensions > Users & browsers
Select the organizational unit you want to deploy to
Click Add > Add from Chrome Web Store
Search for Endpoint Verification and select it
In the Endpoint Verification dialog, ensure Allow access to keys and Allow enterprise challenge are both enabled
Set the installation policy to Force install
Click Save
Note: The Endpoint Verification helper app may be required for macOS and Windows devices. If your organization uses Chrome Enterprise Premium, CrowdStrike Falcon ZTA integration, or certificate-based access for Google Cloud resources, refer to Google's documentation on deploying Endpoint Verification for helper app installation instructions.