Parent Access Code Configuration

This policy specifies configuration that is used to generate and verify Parent Access Code.

|current_config| is always used for generating access code and should be used for validating access code only when it cannot be validated with |future_config|.
|future_config| is the primary config used for validating access code.
|old_configs| should be used for validating access code only when it cannot be validated with |future_config| nor |current_config|.

The expected way of using this policy is to gradually rotate access code configuration. New configuration is always put into |future_config| and at the same
time the existing value is moved into |current_config|. |current_config|'s previous values are moved into |old_configs| and removed after rotation cycle is finished.

This policy applies only to child user.
When this policy is set Parent Access Code can be verified on child user's device.
When this policy is unset it is not possible to verify Parent Access Code on child user's device.
See https://cloud.google.com/docs/chrome-enterprise/policies/?policy=ParentAccessCodeConfig for more information about schema and formatting.

Example value:

{
"old_configs": [
{
"access_code_ttl": 600,
"clock_drift_tolerance": 300,
"shared_secret": "sTr6jqMTJGCbLhWI5plFTQb/VsqxwX2Q"
}
],
"current_config": {
"access_code_ttl": 600,
"clock_drift_tolerance": 300,
"shared_secret": "oOA9nX02LdhYdOzwMsGof+QA3wUKP4YMNlk9S/W3o+w="
},
"future_config": {
"access_code_ttl": 600,
"clock_drift_tolerance": 300,
"shared_secret": "KMsoIjnpvcWmiU1GHchp2blR96mNyJwS"
}
}

Supported on: At least Microsoft Windows 7 or Windows Server 2008 family

Parent Access Code Configuration (The single-line field is deprecated and will be removed in the future. Please start using the multi-line textbox below.)

Registry HiveHKEY_CURRENT_USER
Registry PathSoftware\Policies\Google\ChromeOS
Value NameParentAccessCodeConfig
Value TypeREG_SZ
Default Value


Registry HiveHKEY_CURRENT_USER
Registry PathSoftware\Policies\Google\ChromeOS
Value NameParentAccessCodeConfig
Value TypeREG_MULTI_SZ
Default Value

chromeos.admx

Administrative Templates (Computers)

Administrative Templates (Users)