Chrome Keystone plist payload

[matt_wiese]

I have an environment where we are deploying Chrome Enterprise, not enrolled in CBCM, and we need to enforce the RelaunchNotification Chrome policy. I have the following plist for you viewing pleasure:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>updatePolicies</key>
    <dict>
      <key>global</key>
      <dict>
        <key>UpdateDefault</key>
        <integer>0</integer>
      </dict>
      <key>com.google.Chrome</key>
      <dict>
        <key>UpdateDefault</key>
        <integer>0</integer>
        <key>TargetVersionPrefix</key>
        <string/>
        <key>RollbackToTargetVersion</key>
        <string/>
        <key>TargetChannel</key>
        <string/>
        <key>UpdatesSuppressedStartHour</key>
        <integer>0</integer>
        <key>UpdatesSuppressedStartMin</key>
        <integer>0</integer>
        <key>UpdatesSuppressedDurationMin</key>
        <integer>0</integer>
      </dict>
    </dict>
    <key>RelaunchNotification</key>
    <integer>2</integer>
    <key>RelaunchNotificationPeriod</key>
    <integer>432000000</integer>
    <key>RelaunchWindow</key>
    <dict>
    <key>entries</key>
    <array>
    <dict>
    <key>start</key>
    <dict>
    <key>hour</key>
    <integer>0</integer>
    <key>minute</key>
    <integer>15</integer>
    </dict>
    <key>duration_mins</key>
    <integer>960</integer></dict>
    </array>
    </dict>
  </dict>
</plist>

I have searched high and low, referenced each Google white paper, and have created this several different ways. All with no real effect to be seen in chrome://policy. I was able to get the RelaunchNotification policy to at least show up in chrome://policy but it's listed as Recommended (expecting Mandatory) and no notifications are happening. Please tell me I'm missing something...

[ljcacioppo]

You could try using a config profile with the Application and Custom Settings Payload using this json schema: https://github.com/Jamf-Custom-Profile-Schemas/ProfileManifestsMirror/blob/main/manifests/ManagedPre...

Links for more on using schemas: https://www.jamf.com/blog/profilecreator-manifests-now-available-for-jamf/
JNUC talk on implementing the schema: https://www.youtube.com/watch?v=3ZdFzWBTkjg

[matt_wiese]

big kudos to you @ljcacioppo as this is one of the more slick operations you can do in jamf. I'm now looking at custom json schemas for literally every app we deploy lol

 Although this custom schema covers almost every Chrome policy, I still need the policies for RelaunchWindow. I'll need to figure out a way to convert that to this schema, maybe I'll write up a feature request in that repo you linked.

For now, I was actually able to get the custom plist working. This is going to dumb but I changed the payload domain from com.google.Keystone to com.google.Chrome. Started working like a charm after that.

[jlombardo]

I am having a problem getting the relaunch window to show up also.  It doesn't appear to me that setting the time is a requirement?  Here is what I have for the config profile in Jamf, any tips?

Preference Domain: com.google.Chrome 

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>RelaunchNotification</key>
    <integer>2</integer>
    <key>RelaunchNotificationPeriod</key>
    <integer>3600000</integer>
  </dict>
</plist>