KeyLockr QR Login
Tooo Lab Admin Console
-
logout
Selected school is pending approval
Device enrollment, MDM token creation, machine monitoring, and classroom control are all disabled until SafeX approves this school. Please contact SafeX with your SafeID and school ID to request approval.
Machine list
Default view only shows device online, last-seen, and MDM status. Use buttons to manage school settings or add devices.
School settings
School profile
The ID is generated by the system and is not manually editable.
ChromeOS Chromebook (optional)
Chromebook deployment (for Google Admin Console)
Ext ID
—
OAuth Client ID
—
BE URL
—
Verified Access SA
—
Enroll Token
—
New schools start as pending approval; each admin can keep up to 3 pending schools.
Current school
Use the dropdown at the top to switch schools. This panel shows the current school; click Edit to modify or New School to create one.
Deployment and PKI
Download the school MDM profile and check CA readiness. The profile is used by MDM to push CA trust, browser policy, System Extension pre-approval, and Transparent Proxy network filtering.
Teacher authorization
| Teacher SafeID | view | command | assist | grant time | Actions |
|---|
No authorizations yet.
Students
| Class | Ref | Name | Today's progress (school baseline) | Parent SafeID | Workspace Email | Cards | Actions |
|---|
No students yet.
Policies
| Name | Version | Status | Actions |
|---|
No policies yet.
New student
Leave empty if the student does not use a Chromebook; can be cleared later to unbind
Usage history
Recent screenshots
| Login | Logout | Duration | Machine | Status |
|---|
No login records for this student yet.
Archive history
Time credits
Active credits per day:
Each credit adds to the daily quota every day within its valid window (per-day bonus, not pool).
| Min/day | Reason | Granted by | Granted at | Valid until | Status | Actions |
|---|
Student cards
| Card UID prefix | Bound at | Last used | Status | Actions |
|---|
No cards bound yet.
New teacher authorization
New policy
Audit log
Machine tools
Send message
Lab command
Add device
The 6-digit code is the normal add-device flow. The MDM enrollment token below is only for MDM, bulk, or unattended installs: place the token in managed config so the client binds automatically on first launch; after binding it uses its device key for signed requests.