Assigned to self for tracking.

First analysis shows that chrome://certiticate-manager UI exists after clicking the "Manage Certificates" button (as seen through remote inspection) but is not visible, which makes the device appear frozen.

Does chrome://certificate-manager when logging into the device normally (as guest or as the device owner)?

I tried setting up a public session device (using managedchrome) and starting an app, but I get the message 'Internet disconnected. Please check your internet connection.' even when there is a working Ethernet or WiFIconnection.

I had the same behavior with a current master build (Ctrl+Alt+N before starting the kiosk app simply hanging on "Internet disconnected." - I will investigate and maybe open another big for this on Monday.

I tried with a M59 build and got to the network setup screen on M59 by pressing Ctrl+Alt+N, then pressing "Manage certificates" effectively freezes the Chrome UI as reported.
I will post the command line flags I used to reproduce this shortly.
(I've only seen that a certiticate-manager exists somewhere in the background through remote-debugging-port, but it was not visible).

This may be related to  issue 748432 , which also is happening on M-59 stable when attempting to select a network.

On M61/62, note that  issue 752683  causes the certificate manager to show raw "$i18n{}" strings. That happened after M59, so it shouldn't be related.

The network config screen is disabled by default -- pressing Ctrl + Alt + N while launching a kiosk app just changes the loading text to "Internet disconnected. Please check your internet connection." Which doesn't seem ideal.

I think a device policy needs to be set -- prompt_for_network_when_offline -- which used to default to true, but was changed in https://codereview.chromium.org/2920253003 by xiyuan@.

So, testing with versions 61.0.3130.0 and later will be difficult.

Locally, I can bypass the policy check, but then the cert manager works for me.

Raj is using also 60.0.3112.0 but said he couldn't reproduce the cert manager issues.

Krishna, please try to repro the issue in M59 stable, M60-beta and latest dev. Please update your findings.

It looks the issue was observed in M59 but fixed (disappeared) in M60?

BTW, on M59, this really seems a drawing / z-order issue of some kind.

When I press "Manage Certificates", the UI seems frozen but I can see chrome://certificate-manager open on chrome://inspect through --remote-debugging-port, as reported.

When I press left/right arrow keys on the "frozen" UI, I see in chrome://inspect that the certificate manager actually scrolls.

I am seeing different problems on each milestone with ctrl+alt+n:

M-59 Stable:  The network select list closes up and no buttons are active.

M-60 Beta:  Works for selecting a credential file, but for networks secured with a password you cannot enter the password using the virtual keyboard.

M-61 Dev: ctrl+alt+n just says "Internet disconnected.  Please check your internet connection."  The network selection UI does not appear.

Thanks Mike.

Michael, I am assigning this to you. Let us make sure Network Config UI's behavior is the same as pre-59. 

Adding Test-Manual label for Krishna and team to verify this fix for M-60 refresh. Josafat, can you please confirm M60 refresh timeline?

@mlight Can you please provide precise version numbers for these issues?

M59 Stable build 9460.76.0, chrome 59.0.3071.135
M60 Beta build 9592.78.0, chrome 60.0.3112.95
M61 Dev build 9765.20.0, chrome 61.0.3163.37

pmarko@ Agreed, in M59 the WebUI is created but the WebContents or the dialog itself isn't visible. I can't send any events to the page -- how do you see that it's scrolling?

The Escape button "closes" the WebUI (the WebContents is shut down) and the Network Connectivity screen becomes active again.

Xiyuan: Could https://codereview.chromium.org/2734933004 have caused this issue?

Either way, I suggest someone familiar with OOBE take a look. alemate@ do you have availability for this?

The problem in M61 is issue 752706. The M60 report about the virtual keyboard might be related to the M59 focus issue.

Re #17: It is very likely https://codereview.chromium.org/2734933004 causing issue like that. The interesting part is when SessionController::IsUserSessionBlocked is called for creating a dialog. It could cause the dialog to be created behind the login screen. I suspect that the M59 issue is similar to issue 727951, which I have fixed it on trunk and merged to M60.

Not sure about M60 key events problem, might be related to that CL too.

I can take this since it is probably caused by my CL.

so what's the plan with fixing this?  is it resolved in a particular build?  

is there a workaround to how customers can load certs onto devices that will persist for kiosk apps & networks to use?

UI freezing problem in M59 in original report is fixed in M60. (Unfortunately, it is late to merge the fix for M59).

Unable to trigger network config UI in M61 is fixed (by reverting the policy change).

Virtual keyboard issue is fixed and merged to M60.

Verified in M60 Stable build 9592.83.
Verified in M61 Dev build 9765.16.0.