Prepare the student device: Chromebook

For the lockdown of student Chromebooks, we offer two different security clients: the Trelson Kiosk app and the Trelson Browser Lockdown extension. Both are specially designed for ChromeOS and offer a controlled environment to complete assignments and tests. Here below you will find the steps to prepare the device.

For a detailed overview of the differences between the Kiosk app and the Trelson Browser Lockdown extension and their respective uses, please go to the article about security clients in Trelson.

Before you start the preparations

Before you begin preparing your students' Chromebooks, it's important that the following requirements are met:

• Managed Chromebooks: Student devices must be managed and registered with Chrome Education Upgrade licenses. For detailed information, see Google's device management help article.
• Installing the application: Follow the steps in the article about how to install the app from the Google Workspace Marketplace to install the Trelson application in the Google Workspace domain. 
• Ensure correct access in Google Workspace: Make sure you have the correct admin access in your Google Workspace domain. If you cannot see the options/settings described below, it might mean that you do not have the required administrative access. 

Install the Trelson Kiosk app for exams (version: Progressive Web Application)

1. Open the Google Admin Console

1. Use the Chrome browser and go to admin.google.com.
2. Log in with an administrator account that has permission to manage Kiosk apps in your Google Workspace for Education domain.

2. Enable Verified mode

1. Go to Devices > Chrome > Settings.
2. Select the Organizational unit where students' Chromebooks are registered, or select the top organization so that the settings are inherited downward to all OUs below.
3. Go to the Device settings tab and search for the setting Enrollment and access.
4. Under Verified mode, you need to paste a Service Account address into the "Services with full access" field. Find the address by opening another tab, log in to Trelson using an account with admin access and visit https://assessment.trelson.com/teacher/kioskinfo. Copy the information in the field “Service account”. Note! If, in the admin console, there are other Service Account addresses, make sure to add Trelsons on a new row.  
5. Click Save to grant Trelson access to check whether the Chromebook is in Kiosk mode, which is required for the student to open the exam.
   
   

3. Add the Kiosk app to Chromebooks

1. Go to Devices > Chrome > Apps and extensions.
2. Go to the Kiosks tab and click on the yellow plus sign in the upper right corner.
3. Select the Organizational unit where students' Chromebooks are registered.
4. Select Add app via URL and paste the following URL:
   https://assessment.trelson.com/student/kiosk
   
5. Accept the terms to add the app.
   
   

4. Configure app settings

1. After the app has been added to the list, click on it to expand the configuration settings box.
2. Scroll down to the bottom and click on Add extensions and select Add from Chrome Web Store.
3. Click the Search by ID option and paste the Companion Extension ID locatable within Trelson (if you are an administrator)
   assessment.trelson.com/teacher/kioskinfo
4. Select Trelson Companion Extension when it appears and click Select.
5. Expand more information about the extension and ensure that the settings listed below are enabled. Once done, make sure to click Save in the top right corner of the admin console.
   
   
   • Allow enterprise challenge 
   • Allow on-screen keyboard 
   • Enable plug-ins

5. Re-grant scope access to the Trelson Workspace Application

1. In the menu to the left, navigate to Apps > Google Workspace Marketplace Apps > Apps list.
2. Locate and select the Trelson in the list (our Workspace application). It is located below Domain-installed apps.
3. Click Grant access. This is necessary to approve the changes we have made to our Workspace Application in order for the new app for Kiosk mode exams to work correctly.

6. Installation complete!

The app is now installed on students' managed Chromebooks and will function like the previous app for exams in Kiosk mode.

If you have any questions regarding this change or need assistance with the installation, contact support@trelson.com.

Install the “Trelson Browser Lockdown” extension

Through the Trelson Browser Lockdown extension, we are able to regulate extensive parts of ChromeOS, however, some adjustments to the settings in your Google Workspace for Education domain are required to ensure maximum security. When using Trelson Browser Lockdown, students still access their local file system on their Chromebooks without any restrictions. Therefore, be sure to oversee which Android apps are allowed for students.

You need to be an administrator in the Google Workspace domain to be able to install the extension.

Note that this extension is only compatible with ChromeOS.

To install the Trelson Browser Lockdown extension on students' devices, follow these steps:

1. Admin console: Open the admin console by using the Chrome browser and going to admin.google.com.
2. Sign in: Use an administrator account for your Google Workspace for Education domain.
3. Adjust settings: Go to Devices > Chrome > Settings > Users & Browsers and select the Organizational Unit where students' accounts are located.
4. Configure policies: Adjust the settings according to the table provided to enable the Trelson Browser Lockdown extension. This includes requiring the student to enable the extension in incognito mode, if you choose to allow incognito mode for managed devices.

5. Student installation: To install the Trelson Browser Lockdown extension on student devices, go to Devices > Chrome > Apps & Extensions. Navigate to the tab on the right named Users & Browsers. Select the Organizational Unit where the students' accounts are located. Press on the yellow "+"-button > Select "Chrome web store" and search app by ID: 'bcfphnbeddegigffmilnjfddmjcpacol'. Follow any additional instructions to add the extension.
6. Complete installation: Select 'Force Install' and 'Allow all permissions'. Click on 'Save'.

If incognito mode is allowed

Allowing incognito mode on student Chromebooks is fine, but if so, the administrator needs to make specific settings for the Trelson Browser Lockdown extension to work properly. 

Follow these steps to make the necessary adjustments in the Trelson Assessment:

1. Log in: Go to assessment.trelson.com and log in as ‘Teacher’.
2. Select organization: Click on the organization name in the upper right corner and select the current organization.
3. Navigate to Settings: Go to the 'Organization' menu option in the left side menu.
4. Activate Trelson Browser Lockdown in incognito mode: Check the box 'Require the student to activate the extension in incognito mode'. This setting must be enabled for all organizations where incognito mode is allowed for managed devices.

If the instructions above are not followed, the student will be able to start a Trelson Browser Lockdown session through a standard web browser. After this, the student can open an incognito tab to surf the internet without any restrictions. By following these instructions, the student will be forced to allow the Trelson Browser Lockdown extension to run even in incognito mode before they can even begin the task. This reduces the risk of cheating and digital distractions.

What does the student need to do if incognito mode is allowed?

When students start their first exam, they are met with a dialog box that shows "HELP" instead of the option to open the exam. Clicking on "HELP" opens a dialog box with a link for students to click on. By following this link, students are directed to the Trelson Browser Lockdown extension settings, where they need to enable the Trelson Browser Lockdown extension even for incognito mode. After this setting is made, Trelson Browser Lockdown will also be active during incognito mode.