Secure Website in Chrome Kiosk Mode Secure Website in Chrome Kiosk Mode google-chrome google-chrome

Secure Website in Chrome Kiosk Mode


If you provision the chromebooks yourself, you might be able to use TLS client authentication.

You would install an ssl certificate on the chromebook once which you can then use to authenticate to the web server. A nodejs example can be found here http://nategood.com/nodejs-ssl-client-cert-auth-api-rest

There is also a passport.js module for this https://github.com/ripjar/passport-client-cert

In theory a user can install the certificate on his own, he would get a message asking him to confirm the installation of the certificate, hit okay and that's it.

But be aware, that the certificate can easily be extracted from the chromebook via the settings.


If I understand correctly, you want to make your website only accessible from the chromebooks you configured. Please clarify if this is not what you meant.

Then you can have a landing page (can require authentication) that generates a random token for your chromebooks on first run only. Store this token in a cookie or local storage, and send it every time the app runs to verify on the server.