ChromeOS Device Check Failures — How to Fix

If you were blocked from signing in to a Samsara application, your Chromebook did not pass one of our security checks. Find your check below and follow the steps.

Contents

1. Device Is Not Enrolled in ChromeOS Device Management
2. Disk Is Not Encrypted
3. Firewall Is Disabled
4. Screen Lock Does Not Require a Password
5. Screen Locking Is Disabled or Not Permitted
6. Device Is Not in Verified Mode

1. Device Is Not Enrolled in ChromeOS Device Management

Why is this a problem?

Enrolling your Chromebook with Samsara means the company officially recognizes it. Enrollment lets IT send important security updates and confirm your device is safe enough to use with internal company tools and data. Without it, your Chromebook is treated as a personal laptop and cannot be trusted with company information.

How do I fix this?

1. Sign out of your current session: click the time in the bottom-right corner, then select Sign out.
2. On the main login screen, press Ctrl + Alt + E to start enterprise enrollment.
3. Enter your Samsara email address and password.
4. When the screen confirms the device is enrolled under the samsara.net domain, click Done. You can now sign in normally.

Note: personal Chromebooks bought at retail cannot be enrolled in Samsara's network. You need to use an official company-issued device.

Still not working?

Post in the #help-biztech Slack channel and include:

• Device name (for example, Chromebook-John)
• Operating system: ChromeOS
• Check name: ChromeOS – Device Must Be Enrolled in ChromeOS Device Management
• Source: Okta Device Assurance
• When the problem started

2. Disk Is Not Encrypted

Why is this a problem?

Disk encryption scrambles the files on your laptop so that nobody can read your data if it is lost or stolen. Chromebooks turn this on automatically for corporate accounts, so this error usually means you are browsing as a Guest or using a personal Google account, where company data is not kept separate and protected.

How do I fix this?

1. Click the time in the bottom-right corner and select Sign out.
2. Sign back in with your Samsara corporate profile. Do not use Browse as Guest or a personal Gmail account.
3. If you are already on your corporate profile and still see this error, refresh your device's security settings:
   • Open a new Chrome tab.
   • Type chrome://policy in the address bar and press Enter.
   • Click Reload policies at the top left.

Still not working?

Post in the #help-biztech Slack channel and include:

• Device name (for example, Chromebook-John)
• Operating system: ChromeOS
• Check name: ChromeOS – Disk Must Be Encrypted
• Source: Okta Device Assurance
• When the problem started

3. Firewall Is Disabled

Why is this a problem?

A firewall is a digital shield. It blocks attackers and malicious software from reaching your laptop when you connect to public Wi-Fi, such as at a coffee shop or airport. This error usually happens when a browser extension or a temporary network glitch turns the shield off.

How do I fix this?

1. Restart your Chromebook. Turn it completely off, wait 10 seconds, then turn it back on. This is the quickest way to reset the system and turn the firewall back on.
2. Turn off network extensions. Disable any personal VPN extensions or custom network tools in Chrome — these can interfere with the built-in firewall.

Still not working?

Post in the #help-biztech Slack channel and include:

• Device name (for example, Chromebook-John)
• Operating system: ChromeOS
• Check name: ChromeOS – Firewall Must Be Enabled
• Source: Okta Device Assurance
• When the problem started

4. Screen Lock Does Not Require a Password

Why is this a problem?

If you step away from your desk or leave your laptop unattended, requiring a password to unlock the screen makes sure nobody else can open your device and read company emails or documents.

How do I fix this?

1. Click the time in the bottom-right corner of your screen, then click the Settings gear icon.
2. In the sidebar, click Security and privacy.
3. Click Lock screen and sign-in.
4. Enter your corporate account password to unlock these settings.
5. Select Password or PIN and make sure a secure lock method is turned on.

Still not working?

Post in the #help-biztech Slack channel and include:

• Device name (for example, Chromebook-John)
• Operating system: ChromeOS
• Check name: ChromeOS – Screen Lock Must Require a Password
• Source: Okta Device Assurance
• When the problem started

5. Screen Locking Is Disabled or Not Permitted

Why is this a problem?

Your Chromebook needs to lock itself automatically whenever it goes to sleep or you close the lid. This keeps your work private even if you forget to lock the screen before walking away.

How do I fix this?

1. Click the time in the bottom-right corner of your screen, then click the Settings gear icon.
2. In the sidebar, click Security and privacy.
3. Click Lock screen and sign-in.
4. Find Lock when sleeping or lid is closed and turn the toggle on (it turns blue).
5. If the toggle is greyed out, open a new tab, go to chrome://policy, and click Reload policies to refresh your settings from our server. Then try step 4 again.

Still not working?

Post in the #help-biztech Slack channel and include:

• Device name (for example, Chromebook-John)
• Operating system: ChromeOS
• Check name: ChromeOS – Permit Screen Locking
• Source: Okta Device Assurance
• When the problem started

6. Key Trust Level: Device Is Not in Verified Mode

Why is this a problem?

Your Chromebook has Developer Mode turned on. Developer Mode disables Google's built-in safety checks that confirm your laptop has not been tampered with by malware. To keep Samsara's network secure, the device needs to be returned to Verified Mode, which turns those safety checks back on.

How do I fix this?

⚠️ Back up your files first. Turning Developer Mode off will factory reset your Chromebook and erase everything stored locally. Make sure anything important — especially files in your Downloads folder — is saved to Google Drive before you continue.

1. Restart your Chromebook.
2. As it starts up, you will see a white screen warning that "OS verification is OFF". Do not press Ctrl + D to skip this screen.
3. Press the Spacebar to re-enable OS verification.
4. Press Enter to confirm.
5. The Chromebook restarts, erases itself, and restores the secure setup. This takes a few minutes.
6. When you reach the welcome screen, follow the steps in check #1 to re-enroll the device under samsara.net.

Still not working?

Post in the #help-biztech Slack channel and include:

• Device name (for example, Chromebook-John)
• Operating system: ChromeOS
• Check name: ChromeOS – Key Trust Level for ChromeOS (Device in Verified Mode)
• Source: Okta Device Assurance
• When the problem started