Deploying App to End-Users

Compatibility

Keeper works on every smartphone, tablet and computer. Keeper supports popular browsers including Chrome, Safari, Firefox, Edge, Opera and IE. Native app installation is available from the Keeper website and every public-facing app store (iTunes, Google Play, Microsoft Store, etc).

Keeper Web Vault

Most business and enterprise customers utilize the Keeper Web Vault, which is a fully featured web-based application. To access the Keeper Web Vault login, visit:

• ​https://keepersecurity.com/vault (Isolated US Region)

• ​https://keepersecurity.eu/vault (Isolated EU Region)

Desktop App Deployment

Benefits of Desktop App vs. Web Vault

The Desktop App has a few more capabilities than the Keeper Web Vault such as:

• Ability to Autofill native apps using KeeperFill for Apps functionality

• Ability to automatically import existing passwords without additional component installation

• Increased performance

Microsoft Windows .MSI file download vs .EXE file download:

• .MSI is for multi-user environments - supports multi-user or shared physical environments. This allows each user on a shared computer to have their own vault.

• .MSI supports a silent install.

• .EXE is for single user environments - one install per computer. Only one vault may be used per physical environment.

• .EXE auto-updates, where .MSI does not.

.EXE installs to:

• User preferences is stored in: C:\Users\{username}\AppData\Roaming\Keeper Password Manager\

• The application binary is installed in: C:\Users\{username}\AppData\Local\keeperpasswordmanager\

.MSI installs to:

• C:\Program Files\keeperpasswordmanager\

Microsoft Windows Win32 Executable

• ​32-bit EXE​

• ​64-bit EXE​

• ​32-bit MSI​

Windows Command-Line Installer Options

The Keeper .MSI and .EXE installers support standard command-line switches. For example, you can install Keeper in silent mode.

.EXE Command-Line Switches

The Keeper .exe installer utilizes Inno Setup. Standard switches are documented here:

.MSI Command-Line Switches

The Keeper .MSI installer utilizes Microsoft Msiexec. Standard switches are documented here:

Mac OS

• ​Keeper for Mac (.dmg)

Linux​

• Keeper for Linux - Fedora, Red Hat and CentOS​

• Keeper for Linux - Debian, Ubuntu and Linux Mint​

Click on the "Linux" icon to download the latest version.

Microsoft Store Version of Keeper

Keeper Security maintains two completely separate versions of the Windows Desktop application. The "Keeper Desktop" app refers to the cross-platform application that mirrors the look and feel of the Keeper Web Vault. The Microsoft Store version of Keeper for Windows 10+ devices is built on the native UWP platform and has some unique benefits.

The Microsoft Store app and the Keeper Desktop app have different capabilities and benefits based on the business requirements.

Microsoft Store App Benefits

• Windows 10+ Only

• Built with native Microsoft UWP platform

• Native secure app sandboxing protects against malicious applications

• Built-in screenshot / screen capture protection

• Support for Windows 10 S-mode

• Windows Hello integration for biometric login to your vault

• Deployment through Microsoft Store

Desktop App (Electron-based) Benefits:

• Supports Windows 7+

• Identical look and feel to the Keeper Web Vault (shared codebase)

• Identical user experience across Windows, Mac and Linux

• Tiles view *

• KeeperFill for Apps *

(*) The Tiles View, KeeperFill for Apps will be coming to the Microsoft Store version of Keeper at a later time. We continue development of this platform alongside the Desktop App to maintain as much consistency as possible.

Microsoft Store App for Business - Offline Deployment

​https://businessstore.microsoft.com/​

Keeper Microsoft Store applications can be downloaded from the Microsoft Store for Business for offline deployment. A Microsoft account is required to log in. If the email address used is for an Azure domain the account must be authorized to access the store or be the primary admin on the Azure account.

Once logged in to the Microsoft Store for Business settings need to be changed in order to display offline downloads for an application. Select Manage from the top bar…

Then select Settings from the left pane…

Enable showing offline files under Shopping Experience. This will then show a drop down option for each application in the store when the application is enabled for offline deployment.

Search for Keeper in the store. Select the Keeper Security application desired. A drop down menu will display titled License Type. The default selection will say Online. Change the drop down to the Offline option and select the Manage button.

The app will display with options to download…

Select the highest minimum version supported by the platforms where the deployment is intended. Select the Architecture and Language. The Download button next to Language will download a metadata file. This may be helpful for some deployment methodologies. Once the Minimum Version and language have been selected scroll down to the Package details section.

Download the package and the license file. Scroll past the License file section and download any Framework packages available for the application. For the Keeper Edge Extension no Frameworks are required. For the Keeper Password Manager several Frameworks files are required. The application package does not include dependencies and cannot be deployed alone if Frameworks are required. Once the meta-data, package, framework and license files are downloaded they can be deployed through SCCM Manager. This msdn blog post provides an example of how to create the application for deployment… https://blogs.msdn.microsoft.com/teju_shyamsundar/2016/05/30/deploy-an-application-from-windows-store-for-business-via-system-center-configuration-manager/​

Mobile App Deployment

Keeper for mobile and tablet devices can be deployed through the public-facing app stores. MDM solutions can also push these applications to end-user devices without any special requirements. When the users register or sign into an account, Enterprise enforcement policies are automatically applied.

• ​iOS / iTunes

• ​Android / Google Play

• ​Surface / Microsoft ​

• ​Kindle Fire / Amazon ​

IE11 - Trusted Sites Policy

Customers who login to Keeper with SSO, or customers who are on corporate networks that deploy group policies for Internet Explorer, ensure that the following entries exist in your Trusted Sites settings under Tools > Internet Options > Security.

US / Global Customers:

keepersecurity.com

*.keepersecurity.com

EU Data Center Customers (Dublin, Ireland):

keepersecurity.eu

*.keepersecurity.eu

Enterprise customers must push group policies to end-users with these Trusted Sites in order to fully function with SSO and other critical features.

SSO Deployments

Keeper supports deployment through your existing SAML 2.0 identity provider. See the Keeper SSO Connect setup guide for deployment instructions.

​