Deploy Qoria Filter for Android tablets using Google Workspace

The Qoria Filter (also known as the Filter for Android outside the US) provides real-time filtering and seamlessly integrates with Linewize Filter to consistently apply your policies.

Before you begin

• You must have managed devices.

• Your devices must meet the Qoria Filter minimum system requirements.

Step 1. Create a certificate

You must create a certificate to allow secure communication between devices and the Linewize Filter Appliance.

1. Sign in to Linewize Filter.

2. Go to Configuration > Self Service Certificates.

3. Complete the required fields:

   • Country (C): Select a country from the list.

   • State/Province (ST): Enter your state.

   • Locality (L): Enter your city.

   • Organisation (O): Enter your school’s name.

   • Common Name (CN): Enter your school’s domain name.

   • Key size (bits): Select a key size, or use the default. Larger keys provide stronger security.

   • Validity for (days): Enter the number of days the certificate remains valid. We recommend rotating certificates every two years.

4. Select Generate.

5. Copy the Signing Certificate and Signing Certificate Key for use in the next step.

6. The root certificate downloads automatically.

Step 2. Add the Qoria Filter app

1. In Google Workspace Admin Console, go to Apps > Web and Mobile Apps.

2. Select the Add app dropdown, then select Search for apps.

3. Search for Qoria Filter, then choose Select.

     Tip

   If you can’t see the app, search for com.qoria.fc.android.edu instead.

4. For User access, select All users in your organisation, then select Continue.

5. For Access method, select Force install and select these checkboxes:

   1. Prevent users from uninstalling the app.

   2. Use for Always on VPN.

6. Select Finish and wait until the webpage takes you to the App settings page.

7. In the Managed configurations section, select Add managed configuration. The Add managed configuration window will appear.

8. Enter "Qoria Filter app for Android" as the Configuration name.

9. Select Enable for each of these Enrolment Keys and enter the following:

   1. Linewize App mode: Turn on the Chromebook App Filter for Linewize Filter.

   2. Linewize Device Identifier: The primary device ID for the Linewize Filter Appliance.

   3. Linewize Device Name: The device name for the Linewize Filter Appliance.

   4. Linewize Region: The deployment region for your school:

      1. United Kingdom (UK)

      2. Sydney 1 (USA and New Zealand)

      3. Sydney 2 (AU)

   5. Linewize User Name: The username you want to authenticate to the device.

        Important

      Google Workspace doesn't support username variables for Android tablets and phones. Devices will have to share a username if they exist in the same OU. If devices are 1-to-1, you must set up a separate OU for each one in Google Workspace and assign the managed configuration to them.

   6. Linewize Auth Secret: The secret key from your Linewize Filter Appliance. This value can be copied from the Linewize Filter under Configuration > Agent Downloads > Copy Preshared Key.

   7. Signing Certificate: The SigningCertificate value from the certificate you generated in Step 1.

   8. Signing Certificate Private Key: The SigningCertificateKey value from the certificate you generated in Step 1.

   9. Configure optional keys:

      1. Linewize Bypass Domains: Comma-separated list of domains excluded from filtering and reporting.

      2. Linewize Device Mac: The MAC Address of your Linewize Filter Appliance.

      3. Hardware Id: The serial number of your Android device

   10. Select Save.

Step 3: Upload Trusted Certificate

1. In Google Workspace Admin Console, go to Devices > Networks.

2. Select which Organisational Unit you want to upload the certificate for. By default, the top-level OU (all users) is selected.

3. In Certificates, select Upload Certificate.

4. Enter a name for the Certificate, then select Upload.

5. Select the certificate file that was generated in step 1.

6. Under Certificate Authority, select Enabled for Android.

     Note

   If this setting is greyed out:

   1. Go to Devices > Mobile and endpoints > Settings > Universal.

   2. Select General.

   3. Select the edit icon next to Mobile Management.

   4. Select Custom, then select Advanced from the Android dropdown menu next to Android.

   5. Select Save.

7. Select Add.

Step 4: Verify the app deployment

On your device:

1. Open the app and check that you see an authenticated user and your school name with a green tick.

2. Check that your Filtering policies apply correctly.

3. Check that other non-browser apps still work correctly.