Deploy BISS to Microsoft Intune
B-TrustWindowsversion 3.46, 28 August 2025
BISS is in the PatchBee catalog as a Windows app from B-Trust, synced from the Windows Package Manager community repository (winget). Pick it in the App Library and PatchBee writes the deployment plan below, builds the package, publishes it to your Intune tenant and assigns it to the Entra groups you choose. New versions then follow through your update rings.
The plan PatchBee writes
BISS as an Intune app
The standard form for a MSI (WiX) (x86 (32-bit), per machine). The real plan is generated from the installer when you package, and shown in full before anything is published; every field can be changed.
- Intune app type
- Windows app (Win32), .intunewin
- Install
- msiexec /i "BISS.msi" /qn /norestart
- Uninstall
- msiexec /x {61CAB6CA-CC29-30AB-BADC-A87CB466211D} /qn /norestart
- Detection
- MSI product code. Product code {61CAB6CA-CC29-30AB-BADC-A87CB466211D}, version 3.46 or newer.
- Requirements
- x86 (32-bit) · per machine
Installers in version 3.46
| Architecture | Type | Scope | Hash |
|---|---|---|---|
| x86 (32-bit) | MSI (WiX) | per machine | SHA-256 published |
PatchBee downloads the installer from the publisher's own URL and verifies its SHA-256 against the catalog before packaging. "None published" means the source carries no hash for this download, so that check has nothing to compare against; packaging still works.
About BISS
BISS (Browser Independent Signing Service) is software for signing with Qualified Electronic Signature (QES) when performing operations in the Internet browser. It uses technology that allows local electronic signature without using an active component. A major advantage of using BISS is its independence from the browser used and its restrictions or inability to support Java applets or ActiveX controls.
BISS provides QES certificates for all popular browsers under operating systems MS Windows 8, MS Windows 10, Linux Ubuntu 18.04 LTS/20.04 LTS and macOS Catalina. It works with each use of the private key of the QES certificate located on the smart card. BISS uses Microsoft CryptoAPI or PKCS11 library to access the smart card.
To use BISS, it is necessary to pre-install the service as an application on the workstation where the signing will be done - administrator rights are required.
- Publisher
- B-Trust
- Homepage
- www.b-trust.bg/services/software
- License
- Proprietary
- Source
- winget · B-trust.BISS
- Versions in catalog
- 1
How this becomes an app in your tenant
Sign in with your Microsoft work account and connect your Intune tenant once. Find BISS in the App Library, open its plan (the commands, detection rule and requirements above, editable) and publish: PatchBee downloads and verifies the installer, builds the package, creates the Intune app and assigns your groups. When B-Trust ships a new version, PatchBee detects it and rolls it out through your rings, with supersedence and rollback.
Read the step-by-step guideMore Windows apps
Catalog data as of 11 October 2026, from the Windows Package Manager community repository (winget). The product re-reads the source every night and plans against the live catalog, so the version here may already be one behind. Nothing is published to a tenant without an administrator approving the plan.