Security notice: a breach at BGP.Exchange may affect some Beriffa network services - customer data is unaffected.
Beriffa Group

BERIFFA Keystone system requirements

What a PC needs for BERIFFA Keystone, which network access it uses, and how updates work.

PC

  • Windows 10 or Windows 11, 64-bit (x64). BERIFFA Keystone is a Windows program; there is no version for macOS or Linux.
  • No administrator rights: the program installs for the Windows user who runs the installer. Every Windows user who needs it runs the installer once.
  • Nothing to install first: the program brings its own .NET runtime.
  • The Microsoft Edge WebView2 Runtime, for Documentation and Web page T-codes. Windows 11 and up-to-date Windows 10 already have it; the installer adds it when it is missing, which needs internet access during setup. On PCs without internet access, your IT installs Microsoft's Evergreen Standalone Installer of the runtime first. Without it the program still works: those T-codes then show plain text or offer Open in Browser.
  • A default web browser: sign-in pages and External link T-codes open in it.
  • For Python script T-codes only: Python 3 from python.org, installed with the py launcher option. PowerShell is part of Windows; PowerShell 7 is used when it is installed.

Network

  • HTTPS access from the PC to your company's Keystone server, at the address in your Service Token.
  • HTTPS access to BERIFFA's update service, so the program can update itself. Your BERIFFA contact gives your IT the addresses to allow.
  • For Microsoft sign-in: access to Microsoft's sign-in pages.

Users and connections

  • A user on each system you work with, created by your administrator in user maintenance (USER).
  • The BERIFFA Service Token of each server, from your administrator. A token is valid for at most two years.
  • For a BERIFFA Keystone account: an authenticator app on your phone, for example Microsoft Authenticator or Google Authenticator.

Updates

  • BERIFFA Keystone looks for a new version when it starts and every 4 hours.
  • At start, a window offers Update now or Later. Update now asks first, because unsaved data is lost, then closes all sessions, installs the update and starts the program again. Later lets you keep working; update any time with Help ▸ System Status ▸ Check for Updates.
  • When a system no longer accepts your version, you see Update Required and must update before you can use that system.
  • Updates are signed by BERIFFA, and the program checks the signature before it offers anything. If the status bar says "No update is offered", keep working with your version and tell your administrator.
  • If an update fails, the old version keeps working.

Settings for IT departments

With Windows policy (Group Policy or Intune) under HKLM\Software\Policies\BERIFFA\ERP, IT can set ScriptTimeout, the time limit of script T-codes (default 10 minutes), and ScriptTempDirectory, a folder in each user's own profile such as %LOCALAPPDATA%\BERIFFA\Scripts, when AppLocker or Windows Defender Application Control blocks scripts in the temporary folder. Never use one folder for all users.