Configure Google Meet hardware devices to trust private certificate authorities

What’s changing

Google Meet hardware devices can now trust HTTPS certificates signed by a private certificate authority (CA). This simplifies the process of setting up and managing third-party user control interfaces (UCIs), especially in high impact meeting spaces with systems like Q-SYS.

Previously, you had to get certificates signed by a public CA to enable Google Meet hardware touch controllers to load third-party UCIs. This process was often time-consuming and expensive, and required frequent renewals.

Now, Google Meet hardware devices can trust certificates signed by a private certificate authority, enabling them to securely load a third-party room control system’s UCI. This gives you more control over your network security and eliminates the costs and complexities associated with public certificate signing.

Getting started

Admin console >Menu > Devices > Networks > Certificates
  • End users: There is no end user impact or action required.

Rollout pace

Availability

  • Available to all Google Workspace customers with Google Meet hardware devices
  • Please note that Android devices aren’t supported yet.

Resources

Use tokens as placeholders for user specific information when configuring managed iOS applications

What’s changing

In May 2024, we launched the ability for admins to remotely configure managed iOS apps on end-user devices via Google Mobile Device Management. 

Beginning today, admins can use tokens in the app configurations for managed iOS apps. Tokens act as placeholders for information specific to a user or device that uses the app, such as a user’s email address or their device serial number. Previously, configuration data was static, but this update gives admins the flexibility to configure devices dynamically according to various users and devices.

Creating the app configuration using XML information using a token placeholder

Getting started

Rollout pace

Availability

Available for Google Workspace:
  • Business Plus
  • Enterprise Standard and Plus
  • Enterprise Essentials and Essentials Plus
  • Education Standard and Plus
  • Nonprofits
  • Frontline Starter and Standard
  • Cloud Identity Premium 

Resources

Configure Google Meet hardware devices to trust private certificates

What’s changing

Google Meet hardware devices can now trust HTTPS certificates signed by a private certificate authority (CA). This simplifies the process of setting up and managing third-party user control interfaces (UCIs), especially in high impact meeting spaces with systems like Q-SYS.

Previously, you had to get certificates signed by a public CA to enable Google Meet hardware touch controllers to load third-party UCIs. This process was often time-consuming and expensive, and required frequent renewals.

Now, you can use private CAs to securely connect your Google Meet hardware with a third-party room control system’s UCI. This gives you more control over your network security and eliminates the costs and complexities associated with public certificates.

Getting started

Admin console >Menu > Devices > Networks > Certificates
  • End users: There is no end user impact or action required.

Rollout pace

Availability

  • Available to all Google Workspace customers with Google Meet hardware devices
  • Please note that Android devices aren’t supported yet.

Resources

See phonics-based performance insights for decodable books in Google Classroom

What’s changing

Last year, we introduced Read Along in Google Classroom, a new feature that helps students build their independent reading skills by enabling teachers to assign differentiated reading content, based on Lexile® measure, grade level, or phonics skills. 
Read Along in Classroom includes access to a growing library of decodable books from Heggerty that educators can assign to practice specific decoding skills. To improve upon the current analytics dashboard experience and provide teachers with phonics-based performance insights for decodable books, we’re adding a new analysis section. 
With this update, teachers will see details about how a student or class is performing on the individual phonics skills listed in a decodable book and words that need practice. 
phonics analysis in Classroom

Getting started

  • Admins: 
  • End users: The phonics analysis dashboard will only appear for newly created decodable book assignments. This can be accessed by clicking on the assignment name in the “Grades” section of Google Classroom. Existing assignments will keep on showing the data as earlier. Visit the Help Center to learn more about Read Along in Google Classroom. 

Rollout pace 

Availability 

Available for Google Workspace: 
  • Education Plus and the Teaching and Learning add-on 

Resources

New Chrome Browser Profile Reporting for Workspace users available in the Admin console

What’s changing

For Google Workspace customers with Chrome Enterprise Core, we’re pleased to introduce a new Chrome browser profile list and reporting features for signed-in Google Workspace users. These new capabilities give IT administrators more insight into Chrome user profiles in their organization . The report includes a new managed profiles list and detail pages where IT administrators can find information such as profile details, browser versions, policies applied, extensions installed and more. The list of extensions installed allows you to identify versions of extensions that can potentially be a risk factor for your users.

Overall, this update significantly improves how admins analyze how their users are interacting with Chrome and allows them to take action to keep their users and data secure in Chrome.

Once enabled, you can view reports by going to Admin console > Chrome browser > Managed profiles

Getting started

  • Admins: Admins can simply log in to the Google Admin console and enable the Managed profile reporting policy. Visit the Help Center to learn more about viewing Chrome browser profile details.

To enable reporting, go to Menu > Devices > Chrome > Settings > User & browser settings > Chrome Browser > Browser Reporting > Managed Browser Reporting
  • End users: There is no end user impact or action required.

Now generally available: configure third-party apps by select API scopes

What’s changing 

Earlier this year, we launched the ability to configure third-party apps by select API scopes to open beta. Beginning today, this feature is now generally available. 
This update gives admins more granular control. They can limit third-party app access to specific OAuth 2.0 scopes for Google APIs, like Drive or Gmail. This prevents apps from gaining additional access without admin consent, even if they request new API scopes in the future. This helps ensure data access is restricted to only what admins deem necessary.

Getting started

Rollout pace

Availability

  • Available to all Google Workspace customers, as well as Cloud Identity Free and Premium customers

Resources

New beta that supports running Google Drive on Arm-compatible Windows PCs now available

What’s changing

We’re excited to announce beta support for Drive for desktop on Windows 11 devices powered by Snapdragon processors. Compiled natively for ARM64, this release enables users to easily sync and store files online from Windows PCs powered by Snapdragon. 
To opt-in to the beta, download and install the beta version of Google Drive for desktop on Arm-compatible Windows 11 device powered by Snapdragon. If you wish to opt-out at any time, disconnect your account and then uninstall the application. 

Getting started 

  • Admins: There is no admin control for this feature. 
  • End users:
    • The beta version of Google Drive for desktop can only be installed on devices running Windows 11 and requires Microsoft WebView2, which is typically included with Windows 11. If it is missing or was previously removed, our installer will recommend you download and install it. 
    • Note: This is a beta version and may contain bugs. It should be used with non-production data only. Alternatively, ensure that your data is backed up separately. 
    • Should you encounter any issues, please submit feedback through the application. Kindly include logs to facilitate troubleshooting and assist us in improving the application. 

Availability 

  • Available to all Google Workspace customers, Workspace Individual Subscribers, and users with personal Google accounts 

Resources 

Available in beta: Convert your client-side encrypted spreadsheets after a Vault or Takeout export

What’s changing

After a Vault or Data export (Takeout), admins can now convert their exported client-side encrypted spreadsheets to Excel files. This allows organizations to maintain access to and analysis of sensitive data in a portable format even after it has been exported from Google Workspace. 
Eligible Google Workspace admins can use this form to request access to the beta. We’ll share more specific instructions once you’re accepted into the beta.

Getting started

  • Admins: Client-side encryption can be enabled at the domain, OU, and Group levels (Admin console > Data > Compliance > Client-side encryption). Visit our Help Center to learn more about client-side encryption.

Rollout pace

Availability

  • Available to Google Workspace Enterprise Plus, Education Standard and Education Plus customers

Resources

Adding granular control options for who can respond to Google Forms

What’s changing

Last year, we ​​introduced a beta that gives Google Forms creators more granular control over who can respond to their forms via sharing settings. 
Previously, form creators had two sharing options: restrict responses to users within their domain (and trusted domains) or make forms public (i.e. anyone with the URL can respond). 
With this new option, now generally available, form creators can limit response access to specific users, groups, or target audiences—similar to how file owners can restrict the sharing of Google Docs, Sheets, Slides or Sites in Drive. 
Adding granular control options for who can respond to Google Forms

Who’s impacted 

Admins, end users and developers 

Why you’d use it 

This feature is useful in any scenario where you’d like to control who can respond to a form. For example, business leaders can better collect feedback from specific organizational units and prevent the form from being responded to by other teams or organization units. Similarly, teachers can use this to ensure a quiz is only accessible to select students who receive the link.

Getting started 

  • Admins: There is no admin control for this feature. 
  • End users: 
    • Form creators must publish their form to enable responders to view the form or submit a response. 
    • Form creators can see who has access to the form and share response access to specific users, groups, or target audiences. 
    • Visit the Help Center to learn more about publishing & sharing your form with responders.

Rollout pace 

Availability 

  • Available to all Google Workspace customers and users with personal Google Accounts 
    • Note: The target audiences feature mentioned above is only available for the Google Drive and Docs and Google Chat services. Supported editions for this feature on Drive, Docs & Chat include: Business Plus, Enterprise Standard, Enterprise Plus, Education Standard, Education Plus, Enterprise Essentials and Enterprise Essentials Plus. Supported editions for this feature on Drive & Docs only include: Business Standard, Nonprofits and G Suite Business. 

Resources 

Request an eSignature on PDF files

What’s changing 

Earlier this year we introduced eSignature in Google Docs for select Google Workspace customers. eSignature helps you request, track, and add signatures to official contracts, and more. 
Today, we’re pleased to announce that you can now request electronic signatures on PDF files stored in Google Drive. This capability includes custom fields, such as phone number, job title, company, etc. Expanding eSignature to include PDFs will make it even easier to request and capture signatures all without leaving Workspace.
Requesting an eSignature on a PDF stored in Google Drive

Getting started

Rollout pace

Availability

Available for Google Workspace:
  • Business Standard and Plus
  • Enterprise Starter, Standard and Plus
  • Essentials and Enterprise Essentials Plus
  • Education Plus
  • Also available to Google Workspace Individual subscribers 

Resources