Deploying the CYRISMA Agent

To deploy the CYRISMA Agent, ensure you have your CYRISMA instance URL and agent installation key ready.

Steps in Google Admin Console:

Log in to the Google Admin Console:

• Access the administrative interface at admin.google.com.
• In the left menu, navigate to Devices > Chrome > Apps & extensions.

Select the Users & Browsers Tab:

• Click on the Users & browsers tab at the top of the page.

Add Chrome App or Extension by ID:

• At the bottom right, hover over the + icon and select Add Chrome app or extension by ID.

Switch to Custom URL:

• From the dropdown, select From a custom URL and fill in the required fields:
  • Extension ID: bbceclfnmfkjegdccfochbkkgmgnobif
  • URL: https://dl.cyrisma.com/6167656E7473/updates.xml
• This Extension ID uniquely identifies the CYRISMA Chromebook Agent in the Google marketplace.

Adjust Policy Settings:

• Once the application is added, modify the policy settings for the app:
  • Under Installation policy, select Force install + pin.
  • Enable Extension is mandatory for incognito.

Configure Certificate Management:

• Enable both Allow access to keys and Allow enterprise challenge.

Set Permissions and URL Access:

• Under Permissions and URL access, select Allow all permissions from the dropdown menu.

Enter JSON Policy for Extensions:

• In the field labeled Enter a JSON value, paste the following JSON configuration based on your CYRISMA instance details:

{
 "InstDetails": {
   "Value": {
     "key": "A437-2C21-0684",
     "url": "https://cc123456.cyrisma.com"
   }
 }
}
 

• Ensure that the values for key and url exactly match those found in your CYRISMA instance under Admin > Scan Agents.

Save Your Settings:

• Click the Save button in the upper right corner to apply the changes.

Change Update URL to Installation URL:

• Near the bottom of the settings menu, change the Update URL to Installation URL and save the configuration once more.

Post-Deployment

Once configured, the CYRISMA Agent Chrome Extension will automatically install on the Chromebook devices. There is no additional configuration needed on the devices themselves, as the agent will manage its installation and updates independently.

Conclusion

After successfully following these steps, the CYRISMA Agent will be deployed across your organization's Chromebook devices. It will continuously provide vulnerability scanning and ensure that your assets remain secure. If you need to troubleshoot or make changes, revisit the Google Admin Console settings as needed.