To install a client certificate on a ChromeOS device for corporate Wi-Fi connectivity, it's necessary to force-install the custom extension containing the certificate. This ensures the extension is installed and activated on the device, enabling it to use the certificate for authentication. Here's how it works: * Custom Extension: The admin creates or obtains a custom extension that includes the client certificate. * Force-Installation: Using the Google Admin console, the admin configures a policy to force-install the extension on ChromeOS devices within the organization. * Device Activation: Once the device receives the policy, the extension is automatically installed and activated, even if the user doesn't manually add it. * Wi-Fi Authentication: The installed extension allows the device to use the client certificate for authentication when connecting to the corporate Wi-Fi network. Option A is incorrect because guest mode installations are not persistent and won't apply the certificate to the device's Wi-Fi settings. Option B is incorrect because distributing through the Chrome Web Store is not necessary for a custom extension intended for internal use. Option D is incorrect because while the certificate encoding is important, it's not the primary step for enabling Wi-Fi authentication. References: * About ChromeOS device management: https://support.google.com/chrome/a/answer/1289314?hl=en pen_spark