/
GEODI Server Installation

GEODI Server Installation

This page contains the installation link, requirements, settings, and deployment stages for discovery, classification, or other topics.

 

 

Installation

 

GEODI Download

 

  1. Download the setup file and run it. GEODI may run as a Windows service or EXE during a log-on user session. For uninterrupted service, you must choose Windows Service.

 

  1. During installation, the GEODIDATAFOLDER path you provide will be used to store projects, indexes, logs, and certain configuration files. Ensure that the service user running GEODI has full access to this directory. The default path is: C:\GEODIDATAFOLDER

    1. You can change the folder in SystemSettings.json. Do not forget to move old folder content.

  1. A license code will be required during the setup. The setup automatically downloads from the DECE-STORE and installs the modules included in your license.

    1. If DECE-STORE (service.decesoftware.com) access is unavailable, offline installation is required. Offline installation and maintenance are somewhat more complicated. We suggest following the standard installation by allowing limited access to DECE-STORE.

 

  1. After installation, the GEODI Manager Page opens at http://127.0.0.1:3323/manager.

    1. This address is locally available; you must define an address reachable from the endpoints for Classification and GDE Discovery Agents.

    2. Most production environments require multiple GEODI Servers for high availability or load balancing. To simplify remote management, add each new server to the cluster configuration immediately after installation.

 

  1. The next step is to install the discovery scopes or templates you need from DECE-STORE. Search by country, regulation, or business need to quickly find the most relevant modules.

    Once installed, templates are automatically kept up to date by GEODI, ensuring that your discovery and compliance configurations remain aligned with evolving regulations and standards.

    1. In offline deployments, DECE-STORE modules must be updated manually. To enable automatic module updates, switch to online mode and allow limited outbound access to the decesoftware.com domains listed in the System Requirements section.

 

License Update

During a fresh installation GEODI will ask you the licence code. We recommend get your licence code prior to installation. If you are moving licence from another machine, you should first deactivate the license.

To update the licence after a period, Run LicenseUpdate.bat to and enter the new licence code.

This command will temporarly stop and restart the service.

 

Defining SSL Certificate

For Classification and Endpoint Discovery (GDE) projects, the GEODI server address must be accessible over HTTPS. Configure SSL before deploying agents.

SSL settings are defined in the SystemSettings.json file located in the GEODI installation directory. GEODI supports two methods for specifying the SSL certificate.

The recommended and simplest approach is to specify the certificate name. This method is supported in GEODI 10. When the certificate is renewed, run UpdateCertificate.bat from the GEODI installation directory to apply the updated certificate. GEODI reloads the certificate configuration without interrupting the service.

 

"SSLLocalCertificateSerial":"<certificate-name>"

"AppPort":443,
"NoSSLPort":80,
"ForceHttpsRedirect": true,

Sample Certificate Name values:

  1. service.decesoftware.com

  2. CN=service.decesoftware.com

Alternatively, you can specify the certificate serial number directly. Because the serial number changes whenever the certificate is renewed, you must update the value in SystemSettings.json after each renewal.

After making the change, run UpdateCertificate.bat to apply the updated certificate configuration.

 

"SSLLocalCertificateSerial":"<certificate-serial-number>"

"AppPort":443,
"NoSSLPort":80,
"ForceHttpsRedirect": true,

The certificate name is the Subject of the certificate.

To find it:

  1. Open Manage Computer Certificates (certlm.msc) or Manage User Certificates (certmgr.msc), depending on where the certificate is installed.

  2. Navigate to the certificate store that contains the certificate (for example, Personal > Certificates).

  3. Open the certificate.

  4. On the General or Details tab, locate the Subject field.

  5. Use the subject name as the certificate name in the GEODI configuration.

To obtain the certificate serial number, run the Manage User Certificates application. The serial number is in the properties/details tab under the Personal directory. If you have a *.pfx file, double-click it to install it.

In cases where certificates are managed with a load balancer, you do not need to make any additional definitions on the GEODI side.

 

 

Installation as a Windows Service

After installation, configure GEODI to run as a Windows service by executing GEODI.WindowsServiceInstall.bat as an administrator. Windows may prompt you for administrator credentials.

The service runs under the specified Windows account, which must have permission to access all directories, network shares, databases, and other resources that GEODI will discover. Configure additional credentials within GEODI when required.

If your configuration relies on mapped drives or other startup tasks, place the required .bat files in the GEODI\Settings\BatchFiles\Startup directory. These scripts are executed automatically when the service starts.

To uninstall the service, run GEODI.WindowsServiceUnInstall.bat from the same directory.

The service appears in the Windows Services console as GEODI.WindowsService and can be managed like any other Windows service.

 

**

 

Notification E-Mail Settings

GEODI sends email notifications for alerts, workflows, scheduled reports, and other system events to predefined recipients or users who subscribe to them. These notifications provide an effective way to monitor system activity and health.

By default, GEODI sends emails through DECE mail servers. In offline deployments, or if you need to use your own mail server, configure the email settings on the following page:

Automatic Notification and E-Mail Settings

 

Software Update

We constantly update the software because we value quality and user experience. Please follow the step GEODI Update Steps on to updsate GEODI and/or Modules and Agents.

 

 

Logs

You can find detailed information about GEODI logs on the GEODI Logs page.

For SIEM integration, the process is simple:
Configure your SIEM system to monitor the log directories specified on that page. No additional connectors or agents are required.

This setup enables real-time monitoring of system activity, security events, and action traces directly from GEODI.

 

Frequently Asked Questions

  1. GEODI and Modules are constantly being developed. As a result of the development (other than resolved problems), better performance, more accurate discovery, higher speed, less dependency on system sources, and more features for both the user and the system administrator are added. Updates come out monthly; we suggest you follow them.

  2. Update information can be followed on the GEODI Download webpage.

  1. No, GEODI will stop the service automatically and start it again when the system starts. There is no need for manual intervention.

  2. Index Changed Content and Scheduled Index Backup are active by default. As long as you don’t change these settings, you don’t lose anything in unexpected shutdowns (Killing the service manually, Power outage, etc.)

You should apply the method that is explained in GEODI Server Installation page. Then, you should restart the service.

Yes, each GEODI can discover the same or different data sources. Management and reporting are centralized through the Master GEODI.

Yes, you can set up a redundant configuration for high availability. GEODI also supports an active-active configuration.

 

Troubleshooting

  1. Control your licence. If you are using a trial license, ensure it is not expired.

  2. SystemSettings.json may not be a valid *.json file. UTF-8 and make sure it is valid.

  3. There may be an invalid value in SystemSettings.json (AppDataFolder or AppPort values.)

  4. The disk may be full.

  5. Control engine and app errors under %appdata%/Logs directory.

  1. Is the service user still valid and has enough permissions? The password may be changed.

  2. The service users must have read/write/delete permissions in GeodiDataFolder at the minimum.

  1. Check if the user can access GeodiDataFolder in the .exe or the service mode.

  2. Make sure other processes do not use files.

  3. This situation occurs when different projects back up to the same target directory. Revert to default settings or check your projects.

  1. For update, server must have access to DECE-STORE and decesoftware.com. If it cannot access to DECE-STORE, you can follow offline update procedure.

  1. Your license may be expired.

  2. If you get the error during the first activation phase, there may be a problem accessing DECE servers(DECE-STORE), and you may need an offline installation.

  1. You should delete the %appdata%DeceAuthentication directory. This action will return the system to the very beginning.

  2. As a precaution, we suggest you create a backup user with “Edit Permission“ authorization.

You can change the index location using the settings in GEODI Server Installation

 

Frequently Asked Questions

  1. GEODI and Modules are constantly being developed. As a result of the development (other than resolved problems), better performance, more accurate discovery, higher speed, less dependency on system sources, and more features for both the user and the system administrator are added. Updates come out monthly; we suggest you follow them.

  2. Update information can be followed on the GEODI Download webpage.

  1. No, GEODI will stop the service automatically and start it again when the system starts. There is no need for manual intervention.

  2. Index Changed Content and Scheduled Index Backup are active by default. As long as you don’t change these settings, you don’t lose anything in unexpected shutdowns (Killing the service manually, Power outage, etc.)

You should apply the method that is explained in GEODI Server Installation page. Then, you should restart the service.

Yes, each GEODI can discover the same or different data sources. Management and reporting are centralized through the Master GEODI.

Yes, you can set up a redundant configuration for high availability. GEODI also supports an active-active configuration.

 

Troubleshooting

  1. Control your licence. If you are using a trial license, ensure it is not expired.

  2. SystemSettings.json may not be a valid *.json file. UTF-8 and make sure it is valid.

  3. There may be an invalid value in SystemSettings.json (AppDataFolder or AppPort values.)

  4. The disk may be full.

  5. Control engine and app errors under %appdata%/Logs directory.

  1. Is the service user still valid and has enough permissions? The password may be changed.

  2. The service users must have read/write/delete permissions in GeodiDataFolder at the minimum.

  1. Check if the user can access GeodiDataFolder in the .exe or the service mode.

  2. Make sure other processes do not use files.

  3. This situation occurs when different projects back up to the same target directory. Revert to default settings or check your projects.

  1. For update, server must have access to DECE-STORE and decesoftware.com. If it cannot access to DECE-STORE, you can follow offline update procedure.

  1. Your license may be expired.

  2. If you get the error during the first activation phase, there may be a problem accessing DECE servers(DECE-STORE), and you may need an offline installation.

  1. You should delete the %appdata%DeceAuthentication directory. This action will return the system to the very beginning.

  2. As a precaution, we suggest you create a backup user with “Edit Permission“ authorization.

You can change the index location using the settings in GEODI Server Installation