For administrators who manage ChromeOS devices for a business or school.
As an admin, you can temporarily roll back ChromeOS to a previous version. For example, you might need to restore a previous ChromeOS version if your users’ critical apps don’t work properly after a version update.
To make sure that users are protected by the latest security updates, we recommend that they use the latest ChromeOS version. By running earlier versions of ChromeOS, you’ll expose your users to known security issues.
Considerations
- You can roll back to the 3 latest ChromeOS versions on the Stable channel, n-3, where n is the current stable release. Or, for devices on the Long-term support candidate (LTC) or Long-term support (LTS) channel, you can roll back to the current version on those channels.
- Move the devices that you want to roll back into their own organizational unit. For details, see Move a device to an organizational unit.
- Check to make sure that rolling back ChromeOS to the version you want solves the issue. Consider setting up a test group and roll back a small number of devices before you roll back the ChromeOS version for a large organizational unit or your entire organization.
- For the restored ChromeOS version to take effect, devices need to restart, wipe, and re-enroll into your account. Users see a notification that lets them know their local data will be automatically deleted during rollback. The next time they sign out, devices automatically restart and wipe all local data, including data in the Downloads folder for all accounts on the device. For kiosk devices, deleted data might also include locally-cached extension data, and might require a significant amount of data to be downloaded over the network after rollback is completed, if applicable.
- Devices with ChromeOS version earlier than the pinned version that you choose don’t roll back. Instead, they update to the pinned version. If the update was skipped for a specific model, the device updates to an earlier version than the one you specify. For information about pinning ChromeOS versions, see Pin ChromeOS updates to a specific version.
Turn on rollback
In the Google Admin console, use the Roll back to target version setting together with the Target version setting to specify the ChromeOS version that you want devices to roll back to.
-
Sign in with an administrator account to the Google Admin console.
If you aren’t using an administrator account, you can’t access the Admin console.
-
Go to Menu
Devices > Chrome > Settings > Device settings.
Requires having the Mobile Device Management administrator privilege.
- To apply the setting to all devices, leave the top organizational unit selected. Otherwise, select a child organizational unit.
- Go to Device update settings.
- Click Auto-update settings.
- For Allow devices to automatically update OS version, select Allow updates.
- For Target version, select a ChromeOS version.
- For Roll back to target version, select Roll back OS.
- Click Roll back OS.
- Click Save.
Verify that devices rolled back
You can check users’ devices to make sure they successfully rolled back.
- Sign into a managed ChromeOS device. Make sure that it belongs to the organizational unit where you turned on rollback.
- At the bottom right, click the time.
- Click Settings
.
- To check the OS version:
- At the bottom of the left panel, click About ChromeOS.
- Under Google ChromeOS, you'll find which ChromeOS version the device uses.