Deploy Certaic to managed Chrome.

Pre-check

• Identify a 10–20 browser pilot cohort.
• Confirm centrally managed Chrome.
• Confirm outbound HTTPS access to the Certaic service.
• Approve extension purpose, permissions, privacy posture, and data handling.

Install

Customer IT adds the approved Chrome Web Store extension to the pilot organizational unit or group and configures enterprise force-install. The production extension ID and current supported version should be verified on an initial test machine.

Enroll

Each installed browser completes one-time organization enrollment. Enrollment creates a revocable installation identity used for authenticated configuration retrieval, check-in, and evidence delivery.

Verify

• Installation appears in Managed Devices.
• Status is Healthy.
• Browser and extension versions match expectations.
• Signed governance configuration is received.

Activate governance

Start with visibility and review. Move priority applications through Allow, Warn, Require Justification, or Block based on the organization’s approved posture and each application’s support level.

Remove / offboard

Revoke the Certaic browser identity first, then remove the enterprise force-install policy. This prevents a browser that has not yet processed the Chrome removal policy from continuing to authenticate.