Ctrlk
Contact UsVisit GuardWare
linkedinyoutube
For the complete documentation index, see llms.txt. This page is also available as Markdown.

GuardWare Server Installation

The GuardWare Management Console is the central platform that coordinates operations across your organisation. Once installed, you have a single point of control to discover and classify sensitive data across your environment, encrypt and restrict access to critical files, and monitor how data is being accessed and shared across endpoints and cloud services.

From the Management Console, you can deploy agents to endpoints and servers, define data classification policies, schedule scans, configure encryption and access rules, receive alerts when policy violations or anomalies are detected, and track remediation processes across your organisation.

All activity across GuardWare DISCOVER, PROTECT, and INSIGHT is managed and visible from a single interface. This guide walks through the complete server installation process, covering all necessary dependencies and configurations.

Requirements for the Management Console Host

Ensure the device hosting the Management Console meets the following minimum requirements:

Specification
Minimum Requirements

CPU

8-core processor or more

RAM

16 GB or more

Storage

Minimum 500 GB of disk space

Windows Server Version

2019 or later (64-bit version), fully updated with all patches installed

Administrator Access

Required for software installation and server configuration

Network Ports

443 (HTTPS) 3306 (MySQL) 6379 (Redis)

Pre-Installation Requirements

Before installing the GuardWare DISCOVER Management Console, the following software dependencies are needed on the Management Console host. These components support the core server functions of DISCOVER.

You can download the installer files from their official websites linked in their respective sections here.

Component
Purpose

Microsoft Visual C++ Redistributable

Required to run applications built with Visual C++ libraries, including runtime components used by MySQL and its associated services.

MySQL (v8.4.4 or higher)

Serves as the database backend for DISCOVER. It stores configuration details, encryption metadata, user profiles, and other operational data.

Redis

Used as an in-memory cache and message broker to support real-time processing and improve system performance.

OpenSSL

Provides SSL/TLS certificate generation for HTTPS access and cryptographic operations. Used to create self-signed certificates or prepare certificates for Azure integration.

IIS (Internet Information Services)

Required to run DISCOVER components and handle all HTTPS requests.

IIS URL Rewrite Module

Ensures all incoming requests are routed correctly through the DISCOVER application, enabling proper handling of application paths and APIs.

Application Request Routing

7Zip

1

Install Microsoft Visual C++ Redistributable

The Microsoft Visual C++ Redistributable package contains essential runtime libraries that allow programs compiled with Microsoft Visual C++ to run on your system. The redistributable provides the necessary runtime components for memory management, core functions, and other operations that MySQL depends on to execute properly.

Without the Visual C++ Redistributable, the MySQL installation will fail, or MySQL services will not start, preventing GuardWare from accessing its database.

  1. Download the appropriate Microsoft Visual C++ Redistributable from Microsoft’s official website, search for the installer, and double-click to launch it.

  2. Click I agree to the license terms and conditions, and click Install.

  3. Click Restart to reboot the device and complete the installation process.

2

Install and Configure MySQL

MySQL is a relational database management system that serves as the central data repository for DISCOVER. Every time you create a scan job, execute a scan, or modify user permissions through the Management Console, that information is written to and retrieved from the MySQL database. The database does not store actual files or sensitive data discovered during scans.

Without MySQL, DISCOVER has no persistent storage for its operational data. The server cannot function without a database to store configurations, track scan history, or maintain user accounts.

  1. Visit MySQL, select the Product Version (8.4.4 or later) and the Operating System from the drop-down.

  2. Click Download to save the MSI installer.

  3. Locate the MSI installer, double-click to launch the MySQL Server Setup, and click Next.

  4. Read and accept the End User Licence Agreement (EULA) and click Next.

  5. When selecting the setup type, you have the option to choose between:

    Installation type
    Description

    Typical

    Installs the server, client, and essential tools quickly. Provides everything DISCOVER needs without extra components.

    Custom

    Lets you select only required components (server + client). Useful if you want to reduce disk usage, omit unnecessary tools, or deploy on a constrained system.

    Complete

    Includes all optional components, sample databases, and documentation. Larger footprint.

  6. Select either Typical or Complete and click Next.

  7. Click Install to begin the installation.

  8. Select Run MySQL Configurator if you wish to automatically launch the MySQL Configurator immediately after clicking Finish.

  9. If you did not select the Run MySQL Configurator on MySQL Server Setup, search MySQL Configurator from Search and click Open to launch it.

  10. Click Next on the Welcome screen.

  11. Select a path to the data directory. You can browse the path by clicking the button beside the dialogue box. This is where MySQL will store all database files, including the DISCOVER database. Ensure the selected location has sufficient space for database growth as scan history accumulates. Click Next.

  12. In the Type and Networking window, keep the default settings and note down the assigned port number. The default port is 3306. You will need this port number when configuring the DISCOVER Server to connect to MySQL. Click Next.

  13. Set a password for the root account and click Next. The root account has full administrative privileges over all MySQL databases.

You will require the username (root) and password created here during the DISCOVER Management Console installation process. Store these credentials securely.

  1. In Windows Service, enable Configure MySQL Server as a Windows Service and Start the MySQL Server at System Startup, then click Next. This ensures MySQL starts automatically when the server boots, so DISCOVER can always access the database without manual intervention.

  2. Adjust file permission settings as required for your environment (default is Yes, grant full access), and click Next.

  3. Skip the sample database creation and click Next.

  4. Review the summary and click Execute to apply the configurations.

  5. After configuration completes, click Finish to exit the configurator. MySQL is now installed and running as a Windows service, ready to store DISCOVER's operational data.

Add MySQL to System PATH

After installing MySQL on Windows, the bin folder (e.g., C:\Program Files\MySQL\bin) must be added to the system PATH environment variable. PATH tells Windows where to look for executables when you type a command in Command Prompt. Without this, you would need to specify the full path each time.

  1. Open Run, enter sysdm.cpl, and click OK.

  2. Go to Advanced and click Environment Variables.

  3. In the System Variables section, search for Path and click Edit.

  4. Click New and enter the MySQL path C:\Program Files\MySQL\MySQL Server 8.4\bin to the system PATH environment variable.

  5. Click OK on all windows to save the changes.

  6. To verify MySQL is correctly added to PATH, open a new Command Prompt window and type mysql-- version. The MySQL version will be displayed.

3

Install Redis

Redis is an in-memory data store that DISCOVER uses to improve performance and support real-time operations. It temporarily caches frequently accessed data, allowing the Management Console to retrieve information much faster than querying the MySQL database for every request.

  1. Download Redis version 8.0.0 or above.

  2. Locate the MSI file, right-click and select Extract All...

  3. Save the folder to C:\Program Files directory and click Extract. Rename the folder Redis 8 for accessibility, as the name will be required to execute another command in Command Prompt.

Add Redis to System PATH

  1. Press Ctrl + R to open Run and type sysdm.cpl to open System Properties.

  2. Go to Advanced and click Environment Variables

  3. Select Path and click Edit.

  4. Click New, enter the path of the Redis folder in the field C:\Program Files\Redis 8 and click OK to save.

  5. Click OK in all to close System Properties.

  6. Open Run again, type cmd and press Ctrl + Shift + Enter keys together to open the Command Prompt with administrator access.

  7. Type or paste the following commands line-by-line and press Enter each time to execute:

    1. The first command installs Redis.

    2. The second checks whether the services are running.

    3. The third checks the version installed.

  1. Close the Command Prompt window.

4

Install OpenSSL

OpenSSL is a cryptographic toolkit used to generate and manage SSL/TLS certificates for secure communications. The certificate's public key may also be uploaded to Azure Entra ID and associated with an App Registration to enable certificate-based application authentication.

This enables DISCOVER to authenticate with supported Azure services without the need for client secrets.

  1. Download Win32/64 OpenSSL for Windows (Win64 OpenSSL v3.6.0 or Win64 OpenSSL v3.6.0 Light recommended).

  2. Locate the installer (.msi or .exe) and double-click to launch it.

  3. Read and accept the license agreement and click Next.

  4. Select the installation directory (default: C:\Program Files\OpenSSL-Win64\) and click Next.

  5. Select a location to store the program’s shortcuts and click Next.

  6. In the Select Additional Tasks window, choose The OpenSSL binaries (/bin) directory. This copies the OpenSSL DLL files to the OpenSSL installation folder rather than the Windows system directory. Click Next.

  7. Click Install to begin the installation.

  8. Click Finish when installation completes.

Add OpenSSL to System PATH

After installing OpenSSL on Windows, the bin folder (e.g., C:\Program Files\OpenSSL-Win64\bin) must be added to the system PATH environment variable. PATH tells Windows where to look for executables when you type a command in Command Prompt.

Without this, you would need to specify the full path to openssl.exe each time. Once added to PATH, you can run OpenSSL commands, such as openssl version or, certificate generation commands, which are required in the following installation steps.

  1. Open Run, type sysdm.cpl, and click OK.

  2. Go to Advanced and click Environment Variables

  3. In the System Variables section, search for Path and click Edit.

  4. Click New and enter the OpenSSL path C:\Program Files\OpenSSL-Win64\bin to the system PATH environment variable.

  5. Click OK on all windows to save the changes.

  6. To verify OpenSSL is correctly added to PATH, open a new Command Prompt window and type openssl version. The OpenSSL version will be displayed.

5

Install IIS

Internet Information Services (IIS) is Microsoft’s web server platform that hosts the DISCOVER Management Console. IIS receives HTTPS requests from the web browser, processes those requests, and serves the web-based interface that allows users to access the Management Console.

Click the tabs below to view the relevant content, or use the links provided here to navigate to the desired section.

  1. Click the Start menu, search for Server Manager, and open it.

  2. Click Add Roles and Features on the home screen, or click Manage in the top-right corner, and select Add Roles and Features.

  3. On Before You Begin, click Next.

  4. On the Select installation type, select Role-based or feature-based installation, and click Next.

  5. On Server Selection, click Select a server from the server pool, choose the server from the list, and click Next.

  6. On Server Roles, select Web Server (IIS) and also select the Include Management tools (if applicable). Click Add Features to close the window, and click Next.

  7. Click Next on Features.

  8. Click Next on Web Server Role (IIS).

  9. Expand the Role Services under Web Server (IIS), and add the following features:

  1. Click Next and select Install to begin the installation. Wait for the installation to complete, then click Close.

These features enable DISCOVER to process dynamic content through CGI, handle API requests through ISAPI extensions, compress responses for better performance, log requests for auditing, and enforce security restrictions. Each feature is required for specific DISCOVER functionality to work correctly.

  1. Verify by opening Run, typing inetmgr to launch the IIS, or, Navigating to http://localhost in a browser to see the IIS welcome page.

6

Install the IIS URL Rewrite Module

Ensure IIS is installed before proceeding with this step.

The IIS URL Rewrite Module is an add-on for Internet Information Services (IIS) that allows you to create rules for manipulating URLs, such as rewriting requests internally, redirecting traffic, enforcing HTTPS or canonical domains, and mapping clean, user-friendly URLs to backend query strings.

The module ensures that all incoming requests are routed through index.php, enabling proper handling of application paths and APIs.

  1. Download the IIS URL Rewrite installer (64-bit).

  2. Locate the .msi and double-click to launch it.

  3. On the IIS URL Rewrite Module 2 Setup welcome screen, read and accept the license agreement.

  4. Click Install to begin the URL rewrite process and wait until it completes.

  5. Click Finish to exit the Setup Wizard.

7

Install Application Request Routing (ARR)

Ensure IIS is installed before proceeding with this step.

Application Request Routing (ARR) is an IIS extension that acts as a reverse proxy between users and GuardWare. When a request is sent to the Management Console, ARR forwards it to the GuardWare application running on the appropriate backend port and returns the response to the user.

It also proxies WebSocket connections, enabling real-time communication between the Management Console and connected agents.

  1. Download ARR (64-bit) from Microsoft's official website.

  2. Locate the .msi and double-click to launch it.

  3. Accept the License Agreement and click Install.

  4. Click Finish to complete the setup and close the window.

8

Install 7-Zip

7-Zip is required by GuardWare to...

  1. Download 7-Zip (64-bit).

  2. Locate the .exe and double-click to launch it.

  3. Select the installation directory and click Install.

  4. Wait for the process to complete and click Close to finish setup.

9

Install The GuardWare Management Console

The GuardWare Management Console Setup prepares the runtime environment for GuardWare and connects to MySQL. Ensure all the above prerequisites are met and configured properly before proceeding.

  1. Double-click to launch the server installer acquired from GuardWare or your service provider, and click Next.

  2. Read and accept the EULA and click Next.

  3. Choose a folder to install the GuardWare Server and click Next.

Here, you can either choose to install the DISCOVER server as fresh or update it.

  1. If installing for the first time, select Fresh Install and click Next.

  2. Enter the following information on the Database Connection Setting page:

Field
Particulars
Description

DB Host

localhost, domain name db.example.com or IP address

Database host address location that GuardWare connects to

DB Port

3306 (most common)

Network endpoint number that a database server uses to listen for incoming connections

DB Name

Name of the specific database you want to connect to on a database server.

Ensure the DB Name is unique to avoid conflicts with any existing MySQL databases

DB Username

root (default)

Database user account name that GuardWare uses to log in to the database

Password

Enter password created during the MySQL setup

DB Password is the password associated with the DB Username. It is used to authenticate and allow access to the database.

  1. Click Test Connection to validate the connection with the database and click Next.

  2. If you have configured a password for Redis, enter it here and click Next.

  3. Enter the Super Admin’s name, email, and password. These credentials will be required to log in to the GuardWare Management Console. Store them securely, and click Next.

  4. Select https and enter the following information:

Field
Particulars

Domain Name

The website address that users type in a browser to access the GuardWare Management Console.

Certificate

SSL/TLS certificate used to secure and encrypt HTTPS connections

Certificate Password

Password to access the SSL/TLS private key (if it is encrypted), which may be set during key generation or certificate export.

  1. Click Install to begin the process and wait for the installation to complete. Click Finish to exit the setup wizard safely.

10

Log in to the Management Console

The Management Console is the web-based interface where administrators can manage scans, view scan results, and perform investigation and remediation tasks.

  1. After installation, the Management Console automatically opens in your default browser.

    1. If you wish to manually open the GuardWare Management Console from a web browser, the exact URL depends on how the server was configured during the setup.

Access Method
URL Format
Notes

Local access

https://localhost/gwapp/login

https://localhost/gwapp/<org_name>/login

Use this when accessing GuardWare locally on the server.

Access via configured domain

https://<domain_name>/gwapp/login

https://<domain_name>/gwapp/<org_name>/login

Requires the domain to resolve to the GuardWare's server IP via DNS or the hosts file.

  1. Navigate to the portal and sign in either with your organisation-provided credentials or your Microsoft 365 account.

    1. If signing in with email credentials for the first time:

      1. Set up Two-Factor Authentication by scanning the QR code with an authenticator app (Google or Microsoft Authenticator) and entering the generated verification code.

    2. Update your password as prompted.

    3. Accept the EULA to proceed.

Last updated