For each operating system, the device configuration process is completed in three steps:
- Proceeding to a device diagnostic check
- Verifying the supported platforms
- Installing lock-down browsers
TIP
Ensure the correct SEB version has been installed on all computers. This version can be downloaded directly from the School Administrator or Board IT accounts.
IMPORTANT
Schools using devices that are not compatible with SEB or Assessment Lock or where students require assistive technology tools must e-mail eqao-support@vretta.com.
Step 1 – Proceeding to a device diagnostic check
A pre-administration hardware check will be available from the student login page of the e-assessment system to help identify devices which may not run well with the SEB or Assessment Lock lockdown browsers, or the alternative access to the e-assessment.
Step 2 – Verifying the supported platforms
| Operating System | Supported Browser List |
|---|---|
| Windows(Microsoft) | Google Chrome—updated version Mozilla Firefox—updated version Microsoft Edge—updated version |
| Mac OSX 10.13.6High Sierra or higher(Apple, MacBook) | Safari—updated version Google Chrome—updated version Mozilla Firefox—updated version |
| Mac iOS(Apple, iPad) | Safari—updated version |
| Android(tablet) | Google Chrome—updated version |
| Google Chrome(Chromebook) | Google Chrome—updated version |
Each combination of an operating system and a device require:
- a different browser locking software
- a different installation process
NOTE
The minimum recommended screen resolution is 768 x 1024. This allows any device the size of an iPad Mini or larger to be used.
Step 3 – Installing the lock-down browsers
SafeExamBrowser
The SEB is a specialized web browser that restricts students’ access to external tools and resources while they are taking the OSSLT. The SEB-configuration file regulates access to system functions, other applications and other settings while also pointing the SEB to the OSSLT and performing a special “handshake” to validate security.
TIP
You can download the SEB-configuration file in the Technical Readiness tab of the e-assessment system. Use the password given in the same tab.
Option 1 – Installing and loading SEB on macOS
- Ensure that your operating system version is higher than 10.13.6 (see Find out which macOS your Mac is using).
- Download the macOS SafeExamBrowser.
- Important: If the devices being used have macOS 26.6 or higher, do not use the version of SEB on the technical readiness page. Instead, please install Safe Exam Browser version 3.7.1 as older versions of SEB are not compatible with macOS 26.6 or higher.
- Open the SEB-configuration file.
- Enter the password in the login screen.
IMPORTANT
The software should not be opened directly. The SEB-configuration file in the Downloads folder must be double-clicked.
Option 2 – Installing and loading SEB on iOS
- Download the SafeExamBrowser App in the App Store.
TIP
You can also directly download the SafeExamBrowser App.
- Download the SEB-configuration file.
- In the Downloads folder of your iPad, open the SEB-configuration file.
- Enter the SEB password.
- Log in with your email and password.
NOTE
Opening the application brings you to a configuration page where you don’t need to fill in anything.
Option 3 – Installing and loading SEB on Windows
- Download the SafeExamBrowser Installer.
- Run the SafeExamBrowserInstaller.exe file.
- Follow the instructions of the InstallShield Wizard.
- Open the SafeExamBrowser.
NOTE
The assessment is compatible with version 3.4.0 of the SEB.
IMPORTANT
In the Do you want to allow this app to make changes to your device? dialogue box, click Yes.
NOTE
You may encounter the following message: You have installed SafeExamBrowser (SEB), but it isn’t configured yet.
5. Follow the instructions of the InstallShield Wizard.
6. Open the SafeExamBrowser.
7. Open the SEB-configuration file.
8. Enter the password in the login screen.
IMPORTANT
The software should not be opened directly. The SEB-configuration file in the Downloads folder must be double-clicked.
Configuring Chromebooks
There are two methods to configure Chromebooks in order to administer the EQAO assessments. Each method has a set of pre-requisites. Use the following table to determine which configuration method applies to your devices and follow the corresponding instructions in the following sections.
| Device Management | System Requirements | Configuration Method |
| Centrally Managed: All Chromebooks are configured by a single Google Chrome Admin Account. | Chrome Admin Console Chrome Enterprise Google’s KIOSK Mode | Kiosk Mode with Assessment Lock Chrome Extension |
| Locally Managed: Chromebooks are configured individually by a user with access to the device directly. | Assessment Lock Extension from Chrome Webstore | Assessment Lock Chrome Extension |
Configuration Instructions for Centrally Managed Chromebooks (KIOSK MODE)
This installation method will only work for Chromebooks that are centrally managed within Chrome’s KIOSK Mode. If your Chromebooks are not centrally managed via Chrome Admin Console & Google Chrome’s KIOSK Mode, please proceed to the next section Configuration Instructions for Individually Managed Chromebooks (BYOD).
Step 1: Add the EQAO assessment link in the Kiosk
1. Log in to your Google Admin Console (admin.console.com).
2. Navigate to Devices → Chrome → Apps & Extensions → Select Organizational Unit → Kiosks to set up the assessment environment.
3. Click on the plus icon at the bottom right corner and click Add by URL.
4. Paste the e-assessment student login URL and Save. The links are located below. Use the login associated with the language that students should see when they login.
- English Student Login Page: https://eqao.vretta.com/#/en/login-student
- French Student Login Page: https://eqao.vretta.com/#/fr/login-student
5. The kiosk will appear on the window.
Important On Auto-Launching the Application: While setting up the KIOSK, there is the option to set the Kiosk to Auto-Launch.
- If the Kiosk is set to auto-launch, chromebooks in the organizational unit will automatically go into the controlled Kiosk as soon as the device is turned on. Even after the assessment is completed, students will be locked into the Kiosk while auto-launch is enabled.
- If auto-launch is disabled, upon opening the chromebooks students will need to select the Assessment Lock Kiosk icon to start the assessment. Once they finish the assessment, they can restart the chromebook and access it as they normally would.
Step 2: Attach the Assessment Lock extension to the EQAO assessment configuration
1. Log in to your Google Admin Console (admin.console.com).
2. Navigate to Devices → Chrome → Apps & Extensions → Select Organizational Unit → Kiosks to set up the assessment environment.
3. Click on the kiosk and click on Add Extension on the side panel.
4. Select Add from Chrome Web Store.
5. Select Search by ID and enter objafjdlhkpglojmhplfeijpojcepoah to search for Assessment Lock.
6. Click on Assessment Lock and click on the Select button at the top right corner.
7. Assessment Lock will show on the side panel under Extensions. Click Save at the top right corner of the page to save this configuration.
Step 3: Configure Kiosk Policies in Device Settings
1. Log in to your Google Admin Console (admin.console.com).
2. Navigate to Devices → Chrome → Settings → Select Organizational Unit → Device Settings
3. Using the list below, search the list of Device Settings and ensure that the Required Configurations are set for each setting.
| Setting | Policy Name | Required Configurations |
| Guest Mode | DeviceGuestModeEnabled | Disable guest mode |
| URL blocking | URLAllowlist | Ensure all allow list links are added to this section. You can find the list of allow list links on this page. |
Step 4: Add Verified Mode Service Email
1. Log in to your Google Admin Console (admin.console.com).
2. Navigate to Devices → Chrome → Settings → Select Organizational Unit → Device Settings
3. Under Enrollment and Access, click Verified mode.
4. Set configuration to: Required verified mode boot for verified access.
5. Add the Verified Access Service Account as follows:
chrome-verified-access-enroll@chrome-verified-access-507406.iam.gserviceaccount.com
6. Click Save at the bottom of the page.
Configuration Instructions for Individually Managed Chromebooks (BYOD)
This installation method should be used for Chromebooks that are configured at the device level. If your Chromebooks are centrally managed via Chrome Admin Console & Google Chrome’s KIOSK Mode, please see the above section Kiosk Application (Centrally Managed with Google’s KIOSK Mode).
1. Proceed to the Assessment Lock extension via the Chrome Web Store.
2. Click the Add To Chrome button, then in the pop up that appears select the Add Extension button.
3. To ensure that the extension has been added correctly, select the puzzle piece on the top right side of the chrome browser and ensure that the Assessment Lock extension is present.
4. On the day of the assessment, the student using the chromebook must log in using one of these two links. Use the login associated with the language that students should see when they login.
- English Student Login Page: https://eqao.vretta.com/#/en/login-student
- French Student Login Page: https://eqao.vretta.com/#/fr/login-student
5. On test day, the Assessment Lock will automatically initialize once the student logs into the assessment and proceeds into the test questions. If the Chrome extension is not active or has been removed, the student will be unable to proceed into the test and it must be added once more in order for the student to proceed.
Limiting Chromebook AI Features via Chrome Admin Console
The setting listed below can be disabled to limit students’ access to Chromebook AI features through the Google Admin Console. These functions can be disabled via Users & Browsers or Managed Guest Sessions. Please use the following steps to disabled the AI features.
Steps to Disable Chromebook AI Features
1. Log in to your Google Admin Console (admin.google.com) using an administrator account.
2. From the left navigation menu, go to Devices > Chrome > Settings > Users & browsers or Managed Guest Sessions.
3. On the left-hand panel, select the specific organizational unit you want to configure.
4. Use the search bar at the top to search for the setting that needs to be configured, find the setting’s page and update the configuration accordingly. Ensure that the Save button is selected to lock in each configuration.
5. Ensure to complete the above process with all of the settings listed below.
| Setting Name | Set Configuration To; | Setting Type |
| Generative AI policy defaults | Do not allow GenAI features | General AI |
| Gemini integrations | Do not allow Gemini integrations | General AI |
| Google AI Mode integrations | Do not allow AI Mode integrations | General AI |
| Built-in AI APIs | Do not allow built-in AI APIs | General AI |
| Google Lens overlay | Do not allow Google Lens overlay | Google Lens |
| Google Lens region search | Disable Google Lens region search | Google Lens |
| New Tab page Google Lens button | Do not show the Google Lens button in the search box on the New Tab page | Google Lens |
Alternative access
IMPORTANT
The alternative access is for specific students with assistive-technology accommodations.
School administrators will indicate which student(s) require a specific software that is not compatible with either the SEB or the Assessment Lock application.
Only these students will be permitted to access the assessment through the EQAO login page.
Students not permitted to use this alternative access method will receive an error message if they try to access the assessment in this way.
System Validations (by schools)
School administrators will validate that the lockdown software has been properly installed on the devices.