Deploy VeraCrypt to Microsoft Intune
IDRIXWindowsversion 1.26.29
VeraCrypt is in the PatchBee catalog as a Windows app from IDRIX, synced from the Windows Package Manager community repository (winget). Pick it in the App Library and PatchBee writes the deployment plan below, builds the package, publishes it to your Intune tenant and assigns it to the Entra groups you choose. New versions then follow through your update rings.
The plan PatchBee writes
VeraCrypt as an Intune app
The standard form for a MSI (WiX) (x64, per machine). The real plan is generated from the installer when you package, and shown in full before anything is published; every field can be changed.
- Intune app type
- Windows app (Win32), .intunewin
- Install
- msiexec /i "VeraCrypt.msi" /qn /norestart /norestart
- Uninstall
- msiexec /x {0F25FB8F-24DC-418E-8E5D-015D9CB5F4C0} /qn /norestart
- Detection
- MSI product code. Product code {0F25FB8F-24DC-418E-8E5D-015D9CB5F4C0}, version 1.26.29 or newer.
- Requirements
- x64 · per machine
Installers in version 1.26.29
| Architecture | Type | Scope | Hash |
|---|---|---|---|
| x64 | MSI (WiX) | per machine | SHA-256 published |
PatchBee downloads the installer from the publisher's own URL and verifies its SHA-256 against the catalog before packaging. "None published" means the source carries no hash for this download, so that check has nothing to compare against; packaging still works.
Silent install switches
Recorded for VeraCrypt in its winget manifest. PatchBee uses them as the installer's unattended switches, so the package installs without a click.
- Silent
- /qn ACCEPTLICENSE=YES
- Silent with progress
- /qb ACCEPTLICENSE=YES
- Custom (always added)
- /norestart
About VeraCrypt
VeraCrypt is a software for establishing and maintaining an on-the-fly-encrypted volume (data storage device). On-the-fly encryption means that data is automatically
encrypted right before it is saved and decrypted right after it is loaded, without any user intervention. No data stored on an encrypted volume can be read (decrypted)
without using the correct password/keyfile(s) or correct encryption keys. Entire file system is encrypted (e.g., file names, folder names, contents of every file,
free space, meta data, etc). Files can be copied to and from a mounted VeraCrypt volume just like they are copied to/from any normal disk (for example, by simple
drag-and-drop operations). Files are automatically being decrypted on the fly (in memory/RAM) while they are being read or copied from an encrypted VeraCrypt volume.
Similarly, files that are being written or copied to the VeraCrypt volume are automatically being encrypted on the fly (right before they are written to the disk) in RAM.
- Publisher
- IDRIX
- Homepage
- veracrypt.io/
- License
- Apache 2.0
- Source
- winget · IDRIX.VeraCrypt
- Versions in catalog
- 8
Also in the catalog for the other platform: VeraCrypt for macOS
How this becomes an app in your tenant
Sign in with your Microsoft work account and connect your Intune tenant once. Find VeraCrypt in the App Library, open its plan (the commands, detection rule and requirements above, editable) and publish: PatchBee downloads and verifies the installer, builds the package, creates the Intune app and assigns your groups. When IDRIX ships a new version, PatchBee detects it and rolls it out through your rings, with supersedence and rollback.
Read the step-by-step guideMore Windows apps
Catalog data as of 11 October 2026, from the Windows Package Manager community repository (winget). The product re-reads the source every night and plans against the live catalog, so the version here may already be one behind. Nothing is published to a tenant without an administrator approving the plan.