Skip to main content

Manage Keepiq settings

The admin-side configuration for Keepiq — Certificate Authority health, master-password policy, and the application approval queue.

Screenshots for this guide are still being captured. The steps below describe the real, shipped admin panel; the numbered walkthrough with screenshots lands with the next journeydoc capture pass. Follow the repository for progress.

Goal​

By the end of this guide you will have opened the Keepiq admin panel under Settings → Administration → Keepiq, verified the Certificate Authority is healthy, set the minimum master-password length and strength score, and approved a pending application registration.

Prerequisites​

  • A Nextcloud admin account on an instance where Keepiq is installed and enabled.
  • Nothing else. Keepiq bootstraps its own private root and intermediate Certificate Authority on install — there is no external PKI or OpenRegister dependency to configure first.

Steps​

The numbered steps land here once the capture pass runs, but the flow is: open Settings → Administration → Keepiq, confirm the CA health card is green (root and intermediate certificate expiry), set min_password_length / min_password_score, and act on any pending application in the approval queue.

Verification​

You are set up correctly when: the Keepiq settings panel renders without an error banner, the CA health card shows valid root and intermediate certificates, saving the password policy persists across a reload, and approving an application moves it out of the pending queue.

Common issues​

SymptomFix
Settings panel not visibleThe app is not enabled for your instance.
CA health card shows an errorThe certificate authority failed to bootstrap; use the CA bootstrap-retry action, or check the server log for the BootstrapCertificateAuthority repair step.
Intermediate certificate nearing expiryKeepiq renews the intermediate certificate automatically via a background job; force a renewal from the admin panel if the automatic renewal hasn't run yet.

Reference​