Skip to content

Deploy KeePassXC to Microsoft Intune

KeePassXC TeamWindowsversion 2.7.12, 10 March 2026

KeePassXC is in the PatchBee catalog as a Windows app from KeePassXC Team, synced from the Windows Package Manager community repository (winget). Pick it in the App Library and PatchBee writes the deployment plan below, builds the package, publishes it to your Intune tenant and assigns it to the Entra groups you choose. New versions then follow through your update rings.

The plan PatchBee writes

KeePassXC as an Intune app

The standard form for a MSI (WiX) (x64, per machine). The real plan is generated from the installer when you package, and shown in full before anything is published; every field can be changed.

Intune app type
Windows app (Win32), .intunewin
Install
msiexec /i "KeePassXC.msi" /qn /norestart
Uninstall
msiexec /x {638CBFF8-D709-4E43-8B2B-AB97A8E0F2ED} /qn /norestart
Detection
MSI product code. Product code {638CBFF8-D709-4E43-8B2B-AB97A8E0F2ED}, version 2.7.12 or newer.
Requirements
x64 · per machine

Installers in version 2.7.12

ArchitectureTypeScopeHash
x64MSI (WiX)per machineSHA-256 published

PatchBee downloads the installer from the publisher's own URL and verifies its SHA-256 against the catalog before packaging. "None published" means the source carries no hash for this download, so that check has nothing to compare against; packaging still works.

Silent install switches

Recorded for KeePassXC in its winget manifest. PatchBee uses them as the installer's unattended switches, so the package installs without a click.

Install location
INSTALL_ROOT="<INSTALLPATH>"

About KeePassXC

KeePassXC is a modern, secure, and open-source password manager that stores and manages your most sensitive information. You can run KeePassXC on Windows, macOS, and Linux systems. KeePassXC is for people with extremely high demands of secure personal data management. It saves many different types of information, such as usernames, passwords, URLs, attachments, and notes in an offline, encrypted file that can be stored in any location, including private and public cloud solutions. For easy identification and management, user-defined titles and icons can be specified for entries. In addition, entries are sorted into customizable groups. An integrated search function allows you to use advanced patterns to easily find any entry in your database. A customizable, fast, and easy-to-use password generator utility allows you to create passwords with any combination of characters or easy to remember passphrases.

Publisher
KeePassXC Team
License
GPL-2.0-or-later
Source
winget · KeePassXCTeam.KeePassXC
Versions in catalog
20
credentialpasswordprotectprotectionsecurityvault

Also in the catalog for the other platform: KeePassXC for macOS

How this becomes an app in your tenant

Sign in with your Microsoft work account and connect your Intune tenant once. Find KeePassXC in the App Library, open its plan (the commands, detection rule and requirements above, editable) and publish: PatchBee downloads and verifies the installer, builds the package, creates the Intune app and assigns your groups. When KeePassXC Team ships a new version, PatchBee detects it and rolls it out through your rings, with supersedence and rollback.

Read the step-by-step guide

More Windows apps

Catalog data as of 11 October 2026, from the Windows Package Manager community repository (winget). The product re-reads the source every night and plans against the live catalog, so the version here may already be one behind. Nothing is published to a tenant without an administrator approving the plan.