the Chromium logo

The Chromium Projects

Debugging Features

This page describes Chromium OS features that are supported beginning in release M41.

Introduction

You can enable debugging features on your ChromeOS device to support installing and testing custom code on your device. These features allow you to:

Debugging features lower system security, primarily by allowing remote access via SSH using publicly known keys. For this reason, you can enable them only during the Out of the Box Experience (OOBE) when the device is booted in Developer Mode. Once you've finished OOBE (e.g. you've logged in to an account), you can't access this section again. You'd have to powerwash it to reset back.

Enabling debugging features

To enable debugging features, do the following:

  1. Use the powerwash process or the recovery process to wipe your hard drive. After the device reboots and you sign in again, you’ll see the first screen. Note: For managed ChromeOS devices, do NOT follow the powerwash or recovery instructions because you won’t be able re-enroll the device afterwards. Instead, wipe the data on your ChromeOS device to reset the device.
  2. Set the device to Developer Mode (see Developer Information for ChromeOS Devices). The system reboots, then displays the “OS Verification is OFF" screen.
  3. Press Ctrl+D to dismiss this screen. The device reboots and shows the first screen.
  4. Click the Enable debugging features link. A confirmation dialog displays.
  5. Click Proceed. The system reboots and displays a dialog with password prompts.
  6. [OPTIONAL] Set the new root password. Note: If you leave the root password blank, the password defaults to .
  7. Click Enable. The screen displays messages indicating success or failure.
  8. Click OK. You'll see the first screen again.
  9. Follow the remaining prompts to configure your Chrome device.

Disabling debugging features

On a managed ChromeOS device, most debugging features remain enabled, even after powerwashing or wiping the data. Use one of the following processes to disable features, depending on your requirements:

This table summarizes the features reset by each procedure (✓ means the feature is reset):

ChromeOS Recovery `cros flash` `cros flash usb://` or `cros flash --clobber-stateful` Powerwash
Rootfs verification
SSH w/ test keys
USB boot
System password (for SSH login)
Dev password (if present, overrides system password for VT2 login)

To manually disable booting from USB:

  1. Make sure the device is in developer mode.
  2. Open the terminal window by pressing Ctrl + Alt + F2.
  3. Log in as root.
  4. Type the default password test0000, or the custom password you set previously.
  5. At the command prompt, type crossystem dev_boot_usb=0