Step 2 -Windows- Deploy SCA with Intune

In this step, you package the approved SCA MSI and create a Windows app (Win32) in Microsoft Intune.

Application deployment and App Configuration are separate Intune objects. Assign both objects to the same Windows test device group.

In this step, you package the approved SCA MSI and create a Windows app (Win32) in Microsoft Intune.

Application deployment and App Configuration are separate Intune objects. Assign both objects to the same Windows test device group.

1

Download the SCA Package

• Download the SecureContacts-<version>.msi file from the latest release:

Release v1.0.1 · Provectus-Software-GmbH/SCA_Desktop_ReleasesGitHub

Use the MSI file for this Intune workflow. Do not package the .exe installer when following the MSI commands and detection rule in this guide.

2

Create the IntuneWin Package

• Copy the downloaded MSI into an empty input folder.

• Run Microsoft Win32 Content Prep Tool:

IntuneWinAppUtil.exe -c "C:\SCA\Input" -s "SecureContacts-<version>.msi" -o "C:\SCA\Output"

Replace <version> with the exact version in the downloaded MSI filename.

• Verify that the .intunewin package was created in the output folder.

3

Create the Windows App

• In the Microsoft Intune admin center, go to Apps → Windows → Create.

• Select Windows app (Win32)

4

App information

• Upload the generated .intunewin file from output folder.

• Review the automatically detected application information and enter the required metadata for your organization.

5

Program

• On the Program page, configure:

Setting	Value
Install command	msiexec /i "SecureContacts-<version>.msi" /qn ALLUSERS=1
Uninstall command	msiexec /x "{PRODUCT-CODE}" /qn
Install behavior	System

Use the exact MSI filename contained in the .intunewin package. Replace {PRODUCT-CODE} with the ProductCode from the selected MSI

Read the ProductCode from the selected MSI with your organization's approved MSI inspection tool. Keep the value including its braces for the uninstall command and detection rule.

Configure the device restart behavior and return codes according to your organization's Win32 application standard.

6

Requirements

• Configure the operating system architecture, minimum Windows version, disk space, and other requirements approved for the selected SCA release.

Use the system requirements approved for the selected release. Do not broaden the Intune requirements to include unsupported devices.

7

Detection Rule

• Select Manually configure detection rules.

• Add one rule with Rule type: MSI and enter the ProductCode from the selected MSI.

• Enable the option for a 32-bit application on 64-bit clients only if this matches the actual MSI installation.

Configure exactly one MSI ProductCode detection rule for SCA. Do not add a second MSI rule for the same application.

8

Assignments

• Assign the application as Required to your Windows test device group.

9

Review + create

Review the configuration and select Create

Deployment of the App is finalized, last step is to verify that configurations are applied and app gets installed via Intune on your Test-device.