Skip to main content

Deploy Qoria Filter on Chromebooks with Android OS

Updated

This article is for IT Support. 

The Qoria Filter Android app provides real-time filtering, seamlessly integrating with Linewize Filter to enforce the policies you have set. If your school’s Chromebooks run on Android OS, Qoria Filter can work with Linewize Connect to enhance content filtering and reporting.

  Important

Qoria Filter can’t filter Progressive Web Apps (PWA) as they run on Chrome OS instead of Android OS.

Before you begin

Contact your Linewize Deployment Engineer for the secret key to your Linewize Filter Appliance.

1. Format the Managed Configuration profile

You must format a Managed Configuration profile with the mandatory fields to configure devices when you deploy the app. Use the template below, enter your details in the quotation marks, as shown, and remove any optional fields your school doesn’t use.

{
"LW_Mode": "Android_Companion",
"LW_DeviceId": "ENTER DETAILS HERE",
"LW_AdditionalDeviceIds": "",
"LW_DeviceName": "",
"LW_MacAddress": "",
"LW_Region": "",
"LW_UserName": "",
"LW_BypassDomains": "",
"LW_AuthSecret": "",
"UniqueDeviceID": "",
"VpnAllowedAndroidApps": ""
}

Mandatory fields

  1. LW_DeviceId - Enter the device ID of your Linewize Filter Appliance. If you use multiple appliances, enter the device ID of your Parent Linewize Filter Appliance.
  2. LW_DeviceName - Enter device name for your Linewize Filter Appliance.
  3. LW_Region - Enter the region that your school is in:
    • Europe - enter uk-1
    • United States/New Zealand - enter syd-1
    • Australia - enter syd-2
  4. LW_UserName - Enter a supported Google variable, such as ${USER_EMAIL} or ${USER_EMAIL_NAME} that matches your usernames in Linewize Filter.
  5. LW_AuthSecret - Enter the secret key from your Linewize deployment engineer.

Optional fields

  1. LW_AdditionalDeviceIds - If your school has multiple Linewize Appliances, enter the device IDs, separating them with a comma.
  2. LW_BypassDomains - If you have a list of domains you do not want filtered or reported on, enter each domain, separated by commas.
  3. LW_MacAddress - If your school has unmanaged Chromebooks, leave this field blank. If you have managed Chromebooks and you record device IDs or serial numbers in Google Workspace, enter the ${DEVICE_SERIAL_NUMBER} Google variable or any other identifier that can be used to identify the physical device.
  4. VpnAllowedAndroidApps - If this field is empty, Qoria Filter app will automatically detect installed apps on the device. If you only want specific apps to have internet access, enter a list of the Application IDs for those apps, separated by commas.

      Important

    If you’re unsure about which apps need internet access, leave this field blank.

2. Deploy the app

  1. Sign in to the Google Admin Workspace Console, then go to Chrome > Apps and Extensions in the sidebar.
  2. On the bottom right, select the + button and select Add from Google Play.
  3. Search for “Qoria Filter”, select the app, and then choose Select. Qoria Filter will now appear in the list of available Android apps.
  4. From the list, select Qoria Filter to configure app settings.

  5. For Installation Policy, select Force Install.

      Tip

    Select Force Install + pin to ChromeOS taskbar if you want the app to be pinned to the ChromeOS taskbar.

  6. Go to the Managed Configuration section and enter the Managed Configuration profile you made in Step 1.
  7. Select Save.

3. Synchronise Certificates

  1. Go to Devices > Chrome > Settings.
  2. Search for Android apps settings and select Certificate synchronisation.
  3. Ensure that Configuration is set to Enable usage of Chrome OS CA certificates in Android apps.
  4. Select Save.

4. Add the Qoria trusted certificate

  1. Download the Qoria Filter trusted certificate (qoria-pub-cert.cer).
  2. Go to Devices > Networks.
  3. Select the Organisational Unit. By default, the top-level OU will be selected (all users).
  4. Go to Certificates and select Upload Certificate.
  5. Enter Qoria Filter trusted certificate as the name, then select UPLOAD.
  6. Select the qoria-pub-cert.cer file you downloaded.
  7. In the Certificate Authority section, ensure that Enabled for Chromebook is selected.
  8. Select ADD.

5. Turn on VPN Bypass for Google Chrome

The VPN Bypass is required to ensure that the Chrome Browser continues to work independently of the Qoria Filter App and remains filtered by the Linewize Connect Chrome Extension. 

  1. Go to Device > Chrome > Settings.
  2. In the User and browser settings, ensure you select the correct Organisational Unit.
  3. Go to the Network section and select the Always-on VPN URL exceptions setting.
  4. In the Configuration section, enter * in the URL Exceptions box and select Save.
  5. Go back to the Network section and select the Always-on VPN setting.
  6. Select EDIT and select the Qoria Filter app from the drop-down list, then select OK.
  7. Ensure Do not allow users to disconnect from a VPN manually is on, then select Save.