Self-hosted CDM - Policy Configuration

meldCX managed CDM service is recommended. However, for customers who have their own CDM account, they will need to be configured as per the below article.

Production / admin.meld.cx:

Configure your CDM OU Policy to run meldCX

We need to configure this policy so that devices within the Organisation Unit (OU) are setup to run the agentM kiosk app. 

1. Sign in to the Google admin console located at https://admin.google.com/. 
   
   
   
2. On the landing page click the Options menu on the top left.
   
   
   
   
3. Then navigate to Chrome management.
   
4. From the Menu select Device settings.
   
5. Select the OU that your device resides in and that you would like to apply the meldCX
   configuration to.
6. From the displayed options, ensure the following settings are configured accordingly:
   1. Forced Re-enrollment: ​Force device to re-enroll into this domain...
      
      
      
   2. Guest Mode: ​Do not allow Guest Mode.
      
      
      
   3. Sign-in Restriction: ​Do not allow any user to Sign-in.
      
      
      
   4. Sign-in Screen: ​Never show user names and photos
      
      
      
   5. User Data: ​Do not erase all user data.
      
      
      
   6. Accessibility Control: Ensure checked. Turn off accessibility settings on sign-in
      screen upon logout.
   7. Auto Update Settings: ​Stop auto-updates.
      
   8. Auto reboot after updates:​ Disallow auto-reboots.
   9. Release Channel: ​Move to Stable Channel.
      
      
      
   10. Device Reporting: ​Enable device state reporting.
   11. Power Management: ​Do not allow device to sleep/shutdown when idle…
   12. Kiosk Settings:​ Do not allow managed guest sessions
       
       

The agentM Kiosk App...

Almost there! Now let's configure the Kiosk App.

1. Go back to the Device Settings menu and select Apps & extensions
   
2. Select "Kiosks"
   
3. On the bottom right, click the + and select the top option
   
   
   
   
4. Change the option to "From a custom URL"
   
   
   
   
5. Enter the ID provided (this is the random code shown in the URL)
6. Enter the URL provided (if you do not have this please email [e-mail])
7. Click Save.
8. Please ensure this app is set to "Auto-launch". The name may be different depending on what link we have provided you.
   
   
9. To finish, please select on "agentM" while still in the Kiosk settings
   
   and ensure the following 3 options are turned on
   

USB Device Whitelisting...

1. Plug in the Device to your computer.
   
   1. On Windows​:
      Use Zadig to obtain the USB ID (VID & PID) of the device.
      
      
      
   2. On MacOS:
      1. Open terminal and type: system_profiler SPUSBDataType
      2. Locate the device in the list
      3. The VID will be listed next to Vendor ID
      4. The PID will be listed next to Product ID
         
         
         
2. Login to your CDM​ account at https://admin.google.com/ 
   Note: If you are using Managed CDM this will need to be done on your behalf.
   
   
3. Click Device Management
4. Click Chrome Management
5. Click Device settings
6. Select the Root Organisational Unit
7. Locate the "USB Detachable Whitelist"
8. Enter the USB ID you obtained in step 1 into a new line in the text area.
9. Click Save
10. Ensure the target device is online and enrolled.
11. It can take up to 15 minutes for the device to receive the updated policy
12. Reboot the device and it should be able to communicate with the USB device