# GuardWare Server Installation The GuardWare Management Console is the central platform that coordinates operations across your organisation. Once installed, you have a single point of control to discover and classify sensitive data across your environment, encrypt and restrict access to critical files, and monitor how data is being accessed and shared across endpoints and cloud services. From the Management Console, you can deploy agents to endpoints and servers, define data classification policies, schedule scans, configure encryption and access rules, receive alerts when policy violations or anomalies are detected, and track remediation processes across your organisation. All activity across GuardWare DISCOVER, PROTECT, and INSIGHT is managed and visible from a single interface. This guide walks through the complete server installation process, covering all necessary dependencies and configurations. ## Requirements for the Management Console Host Ensure the device hosting the Management Console meets the following minimum requirements:
SpecificationMinimum Requirements
CPU8-core processor or more
RAM16 GB or more
StorageMinimum 500 GB of disk space
Windows Server Version2019 or later (64-bit version), fully updated with all patches installed
Administrator AccessRequired for software installation and server configuration
Network Ports443 (HTTPS) 3306 (MySQL) 6379 (Redis)
## Pre-Installation Requirements Before installing the **GuardWare DISCOVER Management Console**, the following software dependencies are needed on the Management Console host. These components support the core server functions of DISCOVER. You can download the installer files from their official websites linked in their respective sections here.
ComponentPurpose
Microsoft Visual C++ RedistributableRequired to run applications built with Visual C++ libraries, including runtime components used by MySQL and its associated services.
MySQL (v8.4.4 or higher)Serves as the database backend for DISCOVER. It stores configuration details, encryption metadata, user profiles, and other operational data.
RedisUsed as an in-memory cache and message broker to support real-time processing and improve system performance.
OpenSSLProvides SSL/TLS certificate generation for HTTPS access and cryptographic operations. Used to create self-signed certificates or prepare certificates for Azure integration.
IIS (Internet Information Services)Required to run DISCOVER components and handle all HTTPS requests.
IIS URL Rewrite ModuleEnsures all incoming requests are routed correctly through the DISCOVER application, enabling proper handling of application paths and APIs.
Application Request Routing
7Zip
{% stepper %} {% step %} ## Install Microsoft Visual C++ Redistributable The Microsoft Visual C++ Redistributable package contains essential runtime libraries that allow programs compiled with Microsoft Visual C++ to run on your system. The redistributable provides the necessary runtime components for memory management, core functions, and other operations that MySQL depends on to execute properly. Without the Visual C++ Redistributable, the MySQL installation will fail, or MySQL services will not start, preventing GuardWare from accessing its database. 1. Download the appropriate Microsoft Visual C++ Redistributable from [**Microsoft’s official website**](https://learn.microsoft.com/en-us/cpp/windows/latest-supported-vc-redist?view=msvc-170#latest-supported-redistributable-version), search for the installer, and double-click to launch it.
2. Click **I agree to the license terms and conditions,** and click **Install**.
3. Click **Restart** to reboot the device and complete the installation process. {% endstep %} {% step %} ## Install and Configure MySQL MySQL is a relational database management system that serves as the central data repository for DISCOVER. Every time you create a scan job, execute a scan, or modify user permissions through the Management Console, that information is written to and retrieved from the MySQL database. The database does not store actual files or sensitive data discovered during scans. Without MySQL, DISCOVER has no persistent storage for its operational data. The server cannot function without a database to store configurations, track scan history, or maintain user accounts. 1. [**Visit MySQL**](https://downloads.mysql.com/archives/community/), select the **Product Version** (8.4.4 or later) and the **Operating System** from the drop-down. 2. Click **Download** to save the MSI installer.
3. Locate the MSI installer, double-click to launch the MySQL Server Setup, and click **Next**. 4. Read and accept the End User Licence Agreement (EULA) and click **Next.**
5. When selecting the setup type, you have the option to choose between:
Installation typeDescription
TypicalInstalls the server, client, and essential tools quickly. Provides everything DISCOVER needs without extra components.
CustomLets you select only required components (server + client). Useful if you want to reduce disk usage, omit unnecessary tools, or deploy on a constrained system.
CompleteIncludes all optional components, sample databases, and documentation. Larger footprint.
6. Select either **Typical** or **Complete** and click **Next**.
7. Click **Install** to begin the installation.
8. Select **Run MySQL Configurator** if you wish to automatically launch the MySQL Configurator immediately after clicking **Finish**.
9. If you did not select the **Run MySQL Configurator** on MySQL Server Setup, search **MySQL Configurator** from **Search** and click **Open** to launch it.
10. Click **Next** on the Welcome screen.
11. Select a path to the data directory. You can browse the path by clicking the button beside the dialogue box. This is where MySQL will store all database files, including the DISCOVER database. Ensure the selected location has sufficient space for database growth as scan history accumulates. Click **Next**.
12. In the **Type and Networking** window, keep the default settings and note down the assigned port number. The default port is **3306**. You will need this port number when configuring the DISCOVER Server to connect to MySQL. Click **Next**.
13. Set a password for the root account and click **Next**. The root account has full administrative privileges over all MySQL databases.
{% hint style="info" %} You will require the **username (root)** and **password** created here during the DISCOVER Management Console installation process. Store these credentials securely. {% endhint %} 14. In **Windows Service**, enable **Configure MySQL Server as a Windows Service** and **Start the MySQL Server at System Startup**, then click **Next**. This ensures MySQL starts automatically when the server boots, so DISCOVER can always access the database without manual intervention.
15. Adjust file permission settings as required for your environment (default is **Yes, grant full access**), and click **Next**.
16. Skip the sample database creation and click **Next**. 17. Review the summary and click **Execute** to apply the configurations.
18. After configuration completes, click **Finish** to exit the configurator. MySQL is now installed and running as a Windows service, ready to store DISCOVER's operational data. ### Add MySQL to System PATH After installing MySQL on Windows, the `bin` folder (e.g., `C:\Program Files\MySQL\bin`) must be added to the system PATH environment variable. PATH tells Windows where to look for executables when you type a command in Command Prompt. Without this, you would need to specify the full path each time. 1. Open **Run**, enter `sysdm.cpl`, and click **OK**.
2. Go to **Advanced** and click **Environment Variables.**
3. In the **System Variables** section, search for **Path** and click **Edit.**
4. Click **New** and enter the MySQL path `C:\Program Files\MySQL\MySQL Server 8.4\bin` to the system PATH environment variable.
5. Click **OK** on all windows to save the changes. 6. To verify MySQL is correctly added to PATH, open a new Command Prompt window and type `mysql-- version`. The MySQL version will be displayed.
{% endstep %} {% step %} ## Install Redis Redis is an in-memory data store that DISCOVER uses to improve performance and support real-time operations. It temporarily caches frequently accessed data, allowing the Management Console to retrieve information much faster than querying the MySQL database for every request. 1. [**Download Redis**](https://github.com/microsoftarchive/redis/releases) version 3.0.504 or above.
2. Locate the MSI file and double-click to launch the **Redis on Windows Setup**. 3. On the welcome screen, click **Next**.
4. Read and accept the EULA and click **Next**. 5. Select the Redis installation directory, select the **Add the Redis installation folder to the PATH environment variable**, then click **Next**.
{% hint style="warning" %} Ensure that the **Add the Redis installation folder to the PATH environment variable** is selected. Adding Redis to the system PATH allows the DISCOVER Server to locate and communicate with Redis automatically without requiring manual configuration of the Redis executable location. {% endhint %} 4. Enter the desired port number or leave the default value. The default port is **6379**. Click the **Add an exception to the Windows Firewall** to create a rule in Windows Defender Firewall that allows inbound network traffic to the Redis server's default port. Click **Next**.
5. Choose whether to set a memory limit to restrict the **maximum amount of RAM** Redis can consume for storing in-memory data. Set the Max Memory limit as per your requirements (default 100MB, recommended 1024MB) and click **Next.**
6. Click **Install** to begin the installation.
7. Click **Finish** when installation completes. {% endstep %} {% step %} ## Install OpenSSL OpenSSL is a cryptographic toolkit used to generate and manage SSL/TLS certificates for secure communications. The certificate's public key may also be uploaded to Azure Entra ID and associated with an App Registration to enable certificate-based application authentication. This enables DISCOVER to authenticate with supported Azure services without the need for client secrets. 1. Download [**Win32/64 OpenSSL for Windows**](https://slproweb.com/products/Win32OpenSSL.html) (Win64 OpenSSL v3.6.0 or Win64 OpenSSL v3.6.0 Light recommended).
2. Locate the installer (`.msi` or `.exe`) and double-click to launch it. 3. Read and accept the license agreement and click **Next**.
4. Select the installation directory (default: `C:\Program Files\OpenSSL-Win64\`) and click **Next**.
5. Select a location to store the program’s shortcuts and click **Next.**
6. In the **Select Additional Tasks** window, choose **The OpenSSL binaries (/bin) directory**. This copies the OpenSSL DLL files to the OpenSSL installation folder rather than the Windows system directory. Click **Next**.
7. Click **Install** to begin the installation.
8. Click **Finish** when installation completes. ### Add OpenSSL to System PATH After installing OpenSSL on Windows, the `bin` folder (e.g., `C:\Program Files\OpenSSL-Win64\bin`) must be added to the system PATH environment variable. PATH tells Windows where to look for executables when you type a command in Command Prompt. Without this, you would need to specify the full path to `openssl.exe` each time. Once added to PATH, you can run OpenSSL commands, such as `openssl version` or, certificate generation commands, which are required in the following installation steps. 1. Open **Run**, type `sysdm.cpl`, and click **OK**.
2. Go to **Advanced** and click **Environment Variables**
3. In the **System Variables** section, search for **Path** and click **Edit.**
4. Click **New** and enter the OpenSSL path `C:\Program Files\OpenSSL-Win64\bin` to the system PATH environment variable.
5. Click **OK** on all windows to save the changes. 6. To verify OpenSSL is correctly added to PATH, open a new Command Prompt window and type `openssl version`. The OpenSSL version will be displayed.
{% endstep %} {% step %} ### {% endstep %} {% step %} ### {% endstep %} {% endstepper %} ## 3. ## 4. ## 5. Install IIS Internet Information Services (IIS) is Microsoft’s web server platform that hosts the DISCOVER Management Console. IIS receives HTTPS requests from the web browser, processes those requests, and serves the web-based interface that allows users to access the Management Console. {% hint style="success" %} Click the tabs below to view the relevant content, or use the links provided here to navigate to the desired section. * [**Install IIS on Windows Server**](#install-iis-on-windows-server) * [**Install IIS on Windows Desktop**](#install-iis-on-windows-alternative-option) {% endhint %} ## 6. Install the IIS URL Rewrite Module The IIS URL Rewrite Module is an add-on for Internet Information Services (IIS) that allows you to create rules for manipulating URLs, such as rewriting requests internally, redirecting traffic, enforcing HTTPS or canonical domains, and mapping clean, user-friendly URLs to backend query strings. The module ensures that all incoming requests are routed through `index.php`, enabling proper handling of application paths and APIs. 1. [Download the IIS URL Rewrite](https://www.iis.net/downloads/microsoft/url-rewrite) installer (64-bit).
2. Locate the `.msi` and double-click to launch it. 3. On the **IIS URL Rewrite Module 2 Setup** welcome screen, read and accept the license agreement. 4. Click **Install** to begin the URL rewrite process and wait until it completes.
5. Click **Finish** to exit the Setup Wizard. ## 7. Install ARR Application Request Routing or ARR for short is required for ## 8. Install 7-Zip ## 9. Install The GuardWare Management Console The GuardWare Management Console Setup prepares the runtime environment for GuardWare and connects to MySQL. Ensure all the above prerequisites are met and configured properly before proceeding. 1. Double-click to launch the server installer acquired from [GuardWare](mailto:sales@guardware.com.au) or your service provider, and click **Next**.
2. Read and accept the EULA and click **Next**.
3. Choose a folder to install the GuardWare Server and click **Next**.
--- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.guardware.com/insight/guardware-insight/insight-v5/guardware-server-installation.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.