Deploying App to End-Users

Compatibility

Keeper works on every smartphone, tablet and computer. Keeper supports popular browsers including Chrome, Safari, Firefox, Edge, Opera and IE. Native app installation is available from the Keeper website and every public-facing app store (iTunes, Google Play, Microsoft Store, etc).

Keeper Web Vault

Most business and enterprise customers utilize the Keeper Web Vault, which is a fully featured web-based application. To access the Keeper Web Vault login, visit:

• ​https://keepersecurity.com/vault (Isolated US Region)

• ​https://keepersecurity.eu/vault (Isolated EU Region)

Keeper Desktop - Windows

Benefits of Keeper Desktop App vs. Web Vault

The Desktop App (also referred to as our "Electron" app) has a few more capabilities than the Keeper Web Vault such as:

• Ability to Autofill native apps using KeeperFill for Apps functionality

• Ability to automatically import existing passwords without additional component installation

• Increased performance

Microsoft Windows .MSI file download vs .EXE file download:

• .MSI is for multi-user environments - supports multi-user or shared physical environments. This allows each user on a shared computer to have their own vault.

• .MSI supports a silent install.

• .EXE is for single user environments - one install per computer. Only one vault may be used per physical environment.

• .EXE auto-updates, where .MSI does not.

.EXE installs to:

• User preferences is stored in: C:\Users\{username}\AppData\Roaming\Keeper Password Manager\

• The application binary is installed in: C:\Users\{username}\AppData\Local\keeperpasswordmanager\

.MSI installs to:

• C:\Program Files\keeperpasswordmanager\

Microsoft Windows Win32 Executable

• ​32-bit EXE​

• ​64-bit EXE​

• ​32-bit MSI​

Windows Command-Line Installer Options

The Keeper .MSI and .EXE installers support standard command-line switches. For example, you can install Keeper in silent mode.

.EXE Command-Line Switches

The Keeper .exe installer utilizes Inno Setup. Standard switches are documented here:

.MSI Command-Line Switches

The Keeper .MSI installer utilizes Microsoft Msiexec. Standard switches are documented here:

Keeper Desktop - Mac OS

• ​Keeper for Mac (.dmg)

Keeper Desktop - Linux​

• Keeper for Linux - Fedora, Red Hat and CentOS​

• Keeper for Linux - Debian, Ubuntu and Linux Mint​

Linux distributions supported: Fedora, Red Hat, CentOS, Debian, Ubuntu, Linux Mint.

SHA1 Hash

Keeper Desktop SHA1 hashes are computed based on the most recent version and can be retrieved at the below URL:

Browser Extensions

Store Install Links

The Keeper browser extension components can be installed through direct links the various app stores:

• ​Chrome and Chrome OS​

• Safari (packaged with the Keeper Desktop app and the Mac Store App)

• ​Microsoft Edge​

• ​Firefox​

• Internet Explorer 11+ (.exe) and (.msi)

Offline / Direct Downloads

If your group policy does not support installation of extensions, your SCCM administrator can use the below links to push the extensions or directly:

Chrome and Chrome OS: chrome.zip​

Safari: Packaged with Keeper Desktop app​

Firefox: keeper.xpi​

Internet Explorer: SetupKeeperIE.msi​

Keeper Edge Extension: keeper_edge.zip​

Keeper Edge - Signed Installation instructions please read the next section below.

Keeper Edge Extension - Microsoft Store "Offline" Deployment

To deploy a signed Microsoft Edge extension to users without direct store installation, please follow the below instructions. Administrators should login to the Microsoft Business Store from the link below:

​https://businessstore.microsoft.com/​

Keeper Microsoft Store applications can be downloaded from the Microsoft Store for Business for offline deployment. A Microsoft account is required to log in. If the email address used is for an Azure domain the account must be authorized to access the store or be the primary admin on the Azure account.

Once logged in to the Microsoft Store for Business settings need to be changed in order to display offline downloads for an application. Select Manage from the top bar…

Then select Settings from the left pane…

Enable showing offline files under Shopping Experience. This will then show a drop down option for each application in the store when the application is enabled for offline deployment.

Search for Keeper in the store. Select the Keeper Security application desired. A drop down menu will display titled License Type. The default selection will say Online. Change the drop down to the Offline option and select the Manage button.

The app will display with options to download…

Select the highest minimum version supported by the platforms where the deployment is intended. Select the Architecture and Language. The Download button next to Language will download a metadata file. This may be helpful for some deployment methodologies. Once the Minimum Version and language have been selected scroll down to the Package details section.

Download the package and the license file. Scroll past the License file section and download any Framework packages available for the application. For the Keeper Edge Extension no Frameworks are required. The application package does not include dependencies and cannot be deployed alone if Frameworks are required. Once the meta-data, package, framework and license files are downloaded they can be deployed through SCCM Manager. This MSDN blog post provides an example of how to create the application for deployment: https://blogs.msdn.microsoft.com/teju_shyamsundar/2016/05/30/deploy-an-application-from-windows-store-for-business-via-system-center-configuration-manager/​

Mobile App Deployment

Keeper for mobile and tablet devices can be deployed through the public-facing app stores. MDM solutions can also push these applications to end-user devices without any special requirements. When the users register or sign into an account, Enterprise enforcement policies are automatically applied.

• ​iOS / iTunes

• ​Android / Google Play

• ​Surface / Microsoft ​

• ​Kindle Fire / Amazon ​

IE11 - Trusted Sites Policy

Customers who login to Keeper with SSO, or customers who are on corporate networks that deploy group policies for Internet Explorer, ensure that the following entries exist in your Trusted Sites settings under Tools > Internet Options > Security.

US / Global Customers:

keepersecurity.com

*.keepersecurity.com

EU Data Center Customers (Dublin, Ireland):

keepersecurity.eu

*.keepersecurity.eu

Enterprise customers must push group policies to end-users with these Trusted Sites in order to fully function with SSO and other critical features.

SSO Deployments

Keeper supports deployment through your existing SAML 2.0 identity provider. See the Keeper SSO Connect setup guide for deployment instructions.

​