The Google Service Account is a special Google account that is used by applications to access Google APIs. Create the Google Service Account after you generate your EMM token so you can upload all information at one time. The account is only required if you are using the Google Accounts method for deploying Android for Work.

  1. Navigate to the Google Cloud Platform-Google Developers Console.

  2. Sign in with your Google credentials.


    The Google Admin credentials are not associated with your business domain. Consider creating a Google account specifically for Android for Work for your organization to use so as not to conflict with any existing Google accounts.

  3. Use the drop-down menu from the My Project menu and select the + sign to Create project.

  4. Enter a Project Name to create your API project in the New project window. Consider using ChromeOS-CompanyName as the naming convention.

  5. Agree to the terms and conditions and select Create.

    Your project generates and the Google Developer Console redirects you to the API Manager.

  1. Navigate to Credentials > Create Credentials > Service Account Key >.

  1. Select New Service Account from the Service Account drop-down menu.

  2. Define the Service Account name for your service account. Consider following the Chrome OS naming convention and note the name that you choose as you need it in further steps.

  3. Select the Key Type as P12 .
  4. Select Create. The identity certificate gets automatically created and downloaded to your local drive. You have successfully created your Google Service Account. Select Close.


    You must save your identity certificate and password for when you upload the certificate into the AirWatch Console.

  5. Select Close.

  6. Select Manage service accounts from the Credentials page which opens the Service Accounts page.

  7. Select the menu button (three vertical dots to the far right) and select Create key which opens the "Create private key" window.


    Select the vertical dot on the Service Account name created in step 8. The image following points out the location of the menu button

  8. Select JSON and select Create which generates your private key. The key downloads automatically.


    You must save this private key to your local drive for when you upload it into the AirWatch Console.

  9. Select Close to return to the API Manager Overview Dashboard and select Enable API.

  10. Search for Chrome Device Management API in the Google APIs field.
  11. Select Chrome Device Management APIand select Enable to grant access to the service account that you created.