Deploy KeePass using SCCM | Step-By-Step Guide

Hey You Readers!!! Here we come with another deployment post for you all. We will see the Deployment of KeePass using SCCM. Here we will deploy KeePass using MSI Application Model through SCCM. In this Step-By-Step Guide, we will deploy the KeePass Application on Windows 10/11 devices.

KeePass is a free, open-source password manager that helps you manage your passwords securely. All passwords are stored in one database, which is protected by a master key. This means that there is only one master key you need to remember to unlock the whole database.

KeePass database files are encrypted. KeePass encrypts the whole database, i.e. not only your passwords but also your user names, URLs, notes, etc. The best encryption algorithms are used to ensure the safety of database files (AES-256, ChaCha20, and Twofish).

In addition to being free, KeePass is an open-source program (OSI-certified). The full source code of the application can be viewed to determine whether or not the security features are implemented correctly. KeePass is not available as a self-hosted application.

The MSI application is the best method to deploy KeePass to Windows 10/11 devices. There are also many alternatives in the market, like 1Passowrd, Bitwarden, etc. Each has these applications has its own set of unique features.

• Bitwarden Deployment Using SCCM | Deploy EXE File
• Apple iTunes Deployment using SCCM MSI Application Model

What is an MSI file?

Windows packages that contain installation information, including files to be installed and installation locations, are called MSI files. The EXE and MSI files both install and launch Windows programs.

The EXE file may not always contain an installer and may launch its program when double-clicked. An MSI file, however, always includes an installer.

• Update Balloon Tips Duration using SCCM Configuration Item CI CB
• SCCM CI to find Windows 11 Device is Blocked from an Upgrade

Deploy KeePass using SCCM

Let’s start with the Deployment of KeePass using SCCM. As told earlier, we are using the MSI file for KeePass Deployment. You will see why the availability of MSI files for any application is always a joy for SCCM Admin.

We don’t need to work on prerequisites as we used to tell you in the previous posts in which we are using EXE Application files.

• All we have to do is download the MSI installer and the logo of KeePass, as we know it is available for download, and our half job is done.

One can easily download the 64-bit application directly from KeePass. They have provided different setups for different environments. One can easily differentiate and choose the right setup for the Windows 64-bit architecture.

The following table gives you all the details required for the KeePass Deployment tool using SCCM. This includes the command line for KeePass silent install, Uninstall, and Product Code.

Name	Install Command Line	Uninstall Command Line	Detection Method
KeePass Deployment Tool – Windows Installer (*.msi file)	Install -> msiexec /i “KeePass-2.52.msi” /q	Uninstall -> msiexec /x {18E3CF53-E927-445A-9F34-79CD3F22ED2B} /q	Windows Installer – {18E3CF53-E927-445A-9F34-79CD3F22ED2B}

Create KeePass Application Using SCCM Console

This MSI application deployment guide will use the SCCM admin console to create an application. To start with the Application creation part, copy the downloaded setup to the package source location of the SCCM Server.

• Navigate to SCCM Console \Software Library\Overview\Application Management\Applications.
• Right-click on Applications and select Create Application.

For all MSI application deployments, always Select the Automatically detect Information about the application from installation files and choose Windows Installer (.msi files) in the Type category. Also, enter the UNC Path for the application in Location and click Next as shown below in the image.

Now, something magical happens here, the thing for which MSI files are so well-known. As soon you click on Next, you will see that all the information has been imported from the MSI file like install commands and detection logic shown below, and click Next.

Also in the General Information Tab shown below, you will see it imports the install behavior/command from the installer itself.

• Silent Install Command Line for KeePass= msiexec /i “KeePass-2.52.msi” /q
• Uninstall Command Line – msiexec /x {18E3CF53-E927-445A-9F34-79CD3F22ED2B} /q

Now, click Next on the Summary Tab and end this Create Application Wizard by clicking on Close in Completion Tab.

After the creation of the Application, it will appear in the Application Node. Now to Add an Icon to KeePass, right-click on KeePass and click on Properties. Now choose Software Center Tab as shown below. And click on Browse in Icon, select the icon and click on Apply and OK as shown in the image below.

Distribute KeePass Application to the DP

After the creation of the Application, it will appear in the Application Node. To begin with, the distribution right-clicks on the KeePass Application and clicks on Distribute Content, as shown in the picture below.

Now the Distribute Content Wizard will open, and click Next in the General Tab as shown below in the image.

Then select the Application Name in the Content Tab and Click on Next, as shown in the image below.

Now, in the Content Distribution tab click on the ADD button and choose Distribution Point as shown in the image below.

Then Add Distribution Point page will pop up, choose the Distribution Point on which you want to distribute the Application and click on OK, and then on Next.

After this, Click Next on Summary Tab and complete this Distribution process by clicking Close on Completion Tab.

Deploy KeePass using SCCM

So as of now, we have accomplished two tasks, i.e., Application Creation and Application Distribution to the DP. Now all left is the Deployment of the KeePass on the All Windows 10 Device Collection.

• As you can see, your Application is displaying in Application Node, Right-click on KeePass and select Deploy.

After this, Deploy Software Wizard opens, and in the General Tab, you will see the name of the application in the Name box and click on Browse to select the Collection.

Now the Select Collection page will pop up; choose Device Collection from the drop-down menu, and then

• Select your targeted Device Collection and click on OK, and then Next.
• Here I choose All Windows 10 Devices or Windows 11 Devices

Now in the Deployment Settings Tab, select:

• Install in the Action box
• And choose Available in the Purpose category.

In the Scheduling Tab, enter the time details if you want it to be available at a specific time; otherwise, leave it as it is and click Next. After this, in the User Experience Tab,

• Select Display in Software Center and shows all notification options in the User notifications, and click on Next as shown below.

In the Alerts and Summary Tab, click on Next and to end the process, click on Close in the Completion Tab.

KeePass Deployment – End User Experience

In this section, we will check the end-user experience for KeePass Application Deployment and Installation. The KeePass Application is Created, Distributed, and Deployed.

Now, if you check the Software Center of Win 10 device from the Windows 10 Device (or All Windows 11 Device) Collection, you will see the Application in Available Mode, and the user can install it as per the requirement.

So from the below screenshot, it is evident that the MSI which we used to Deploy KeePass using SCCM on Windows 10/11 devices works fine.

So the above picture clears that we have finally created, Distributed, Deployed, and Installed the KeePass Application, as shown in the Software Center in the above image.

Author

Abhinav Rana is working as an SCCM Admin. He loves to help the community by sharing his knowledge. He is a BTech graduate in Information Technology.