Understanding AUE and the opportunity to maintain security Proprietary + Confidential

Overview Goal

Understand Chrome OS automatic updates, auto-update expiration, and recent changes to our update policy. Proprietary + Confidential

Automatic updates Proprietary + Confidential

Automatic Updates

Chrome OS updates are automatic and include updates to the device itself, Chrome OS and Chrome Browser.

1 2 3

Google provides regular Updates are applied Once applied, a simple automatic updates seamlessly in the reboot of the (approximately every six background, causing no (<10 weeks) to supported impact to user seconds) is all it takes devices. productivity. for the updates to take effect. Proprietary + Confidential

What’s in an update

Security fixes Stability fixes Feature updates

Google provides Google performs continuous Updates include the latest the latest testing and incorporates and greatest features in security fixes across all user feedback to constantly Chrome OS and the aspects of the Chromebook, improve Chromebooks and Chrome Browser. including the operating the Chrome browser. system, Chrome browser and device itself. Proprietary + Confidential

Maintaining security

Chromebooks are the most secure when on the latest available Stable Chrome OS version. Security fixes become available throughout the 6 week cycle and are automatically applied to the “Stable Channel.”

Chrome OS Security updates Browser Device specific

Google partners with the Google constantly provides Google partners with the Linux foundation and other browser security fixes to hardware vendors that partners to provide the latest help users safely navigate make up the core pieces of in operating system security the web. each Chromebook and fixes. provide component specific security updates. Summary: What’s in an update

Chrome devices receive Regular updates include Updates relay fixes from Over time, older Chrome automatic updates that updates that ensure the Google and non-Google devices no longer meet the enhance both the device security of device - if you software providers to requirements needed to and its software. pin devices to older provide the highest level receive crucial updates. This versions - devices become of security and stability leads to the end of automatic increasingly at risk. support. updates. Proprietary + Confidential

Auto-Update Expiration Proprietary + Confidential

What is Auto-Update Expiration?

All devices have a date when automatic software updates expire, which is determined by when the hardware platform was first introduced to the market, rather than the purchase date of the device.

1 2 3

Devices will receive Devices that have not After the AUE date is regular updates until reached their AUE date reached, existing and future reaching their Auto will continue to receive policies may not work as Update Expiration (“AUE”) OS updates and function intended, technical support date, when updates stop. with Chrome Education will not be provided, and Upgrade and Chrome the device experience will Enterprise Upgrade. degrade. Post-AUE experience

Support Security Compatibility

Google Support is unable to help Devices will stop receiving As devices miss critical updates past with expired devices. Even if security updates for Chrome OS AUE, the likelihood increases that they’re able to pinpoint the issue, and Chrome browser as soon as certain websites, apps and/or there is no way to provide they pass their AUE date. Device extensions will become updates or fixes to resolve it. will be vulnerable to a quickly- incompatible and stop working increasing number of publicly altogether. Key pieces of the OS disclosed security bugs. experience may break, potentially making the device unusable. Finding the AUE date

Help Center Admin Console Settings page

Google maintains this help The admin panel devices On each individual device, center page with the AUE page includes the option to users can find their device dates for all Chromebooks. show the AUE date for all AUE date in the Settings Page devices in your fleet. (Settings > About Chrome OS g.co/chromeosupdates > Additional Details). Automatic Update Expiration Date Policy

Devices launching in 2020 and beyond are receiving automatic updates for a longer period of time.

In November, Chrome OS announced extensions for 135+ existing devices.

Many new device platforms launching will receive automatic updates for 25-30% longer (until June of 8 years after launch). Enterprise Education

Samsung Galaxy Go Enterprise Lenovo 10e Chromebook Enterprise Chromebook Tablet

Acer Chromebase Dell Latitude 5400 HP Chromebook 14 Asus Chromebook Flip Enterprise 24I2 Chromebook Enterprise G6 C214MA Devices reaching AUE? Upgrade your fleet!

Longer support More performance More secure

New devices are being Students can easily multitask All Chromebooks launched supported longer than ever and do more with the newest this year come with the with many Chromebooks lineup of Chromebooks. Many Google-designed Titan C launched this year being of the newest EDU devices security chip which keeps supported until 2028! Find announced this year are > devices secure, protects user AUE dates on the Chrome 160% faster than current EDU identity, and ensures system Enterprise Help Center. devices. integrity.

Comparing Speedometer2 benchmarks of devices using N4020 vs Intel N3060 CPUS