GEODI Server Installation

This page contains the installation link, requirements, settings, and deployment stages for discovery, classification, or other topics.

 

 

Installation

 

 

  1. Download the setup file and run it. GEODI may run as a Windows service or EXE during a log-on user session. For uninterrupted service, you must choose Windows Service.

  2. During installation, the GEODIDATAFOLDER path you provide will be used to store projects, indexes, logs, and certain configuration files. Ensure that the service user running GEODI has full access to this directory. The default path is: C:\GEODIDATAFOLDER

    1. You can change the folder in SystemSettings.json içinde değiştirebilirsiniz. Do not forget to move old folder content.

  3. A license code will be required during the setup. The setup automatically downloads from the DECE-STORE and installs the modules included in your license.

    1. If DECE-STORE (service.decesoftware.com) access is unavailable, offline installation is required. Offline installation and maintenance are somewhat more complicated. We suggest following the standard installation by allowing limited access to DECE-STORE.

  4. After installation, the GEODI Manager Page opens at http://127.0.0.1:3323/manager.

    1. This address is locally available; you must define an address reachable from the endpoints for Classification and GDE Discovery Agents.

  5. The next step is to load the discovery scopes or templates you need from DECE-STORE.
    You can search by country, regulation, or business need to find relevant modules quickly.

    Once a template is installed, GEODI automatically updates it, ensuring your discovery and compliance configurations remain current with evolving standards.

    1. In offline installations, updates to DECE-STORE templates must be performed manually.
      However, providing limited outbound access to DECE-STORE is sufficient to enable automatic updates, without requiring full internet access.

      This ensures you stay up to date with the latest discovery rules and compliance templates—even in secure or isolated environments.

 

Defining SSL Certificate

For Classification and Agent PC Discovery projects, the GEODI address must be secure and accessible to clients. To ensure this, you must make the following settings in GEODI for the SSL Certificate. For details, refer to the page. Definitions must be made before agent deployments.

The following SSL definitions should be in the SystemSettings.json file in the GEODI installation directory.

"AppPort":443,
"NoSSLPort":80,
"ForceHttpsRedirect": true,
"SSLLocalCertificateSerial":"<certificate-serial-number>"

 

To obtain the certificate serial number, run the Manage User Certificates application. The serial number is in the properties/details tab under the Personal directory. If you have a *.pfx file, double-click it to install it.

In cases where certificates are managed with a load balancer, you do not need to make any additional definitions on the GEODI side.

 

Installation as a Windows Service

After installation, GEODI becomes a continuous service by starting the GEODI.WindowsServiceInstall.bat file as an administrator. Windows will ask for your administrator username and password.

The user is expected to have access permissions for directories and other Windows sources that GEODI will index. If the user cannot access these sources, you must add authorized users to GEODI. To uninstall the service, run GEODI.WindowsServiceUnInstall.bat in the same directory.

GEODI service will take its place as “GEODI.WindowsService” in the service list. You can start/stop it whenever you like.

While the service is getting started, GEODI.exe must be closed. GEODI.exe may be run when the service is started, the .exe file will connect with the service automatically. You may use this process in rare cases which require the Windows Form interface.

Subst/Mapped Folders

If GEODI sources include a mapped directory or for other startup-related work, the necessary *.bat file must be put in the GEODI → Settings/BatchFiles/Startup directory.

**

Software Update

We constantly update the software because we value quality and user experience. For a GEODI update, running the "update.bat" command that comes with the installation as an administrator is sufficient. You run the command and leave it. All necessary operations will be performed on a running system.

You can turn "update.bat" command to a scheduled task with an authorized user.

Updates for PC Discovery (GDE) and Classification Agents are fully automatic.

GEODI modules get updates more frequently than the main GEODI version. To update modules only, you may run UpdateModules.bat.

 

E-Mail Settings

GEODI sends email notifications for features like alerts and scheduled reports, either to predefined users or those who request them. These emails are extremely useful for monitoring system activity and health.

By default, emails are sent using DECE servers. In offline environments or if you need to customize email settings, you should configure the options provided on the:

🔗 GEODI Automated Notifications & Email Settings page.

 

License Update

Run LicenseUpdate.bat to open the dialog.

If you need to move the GEODI to another machine, you should deactivate the license and then reactivate it on the new machine.

You should also apply the new license keys on the same dialog.

You do not need to stop the service.

 

Logs

You can find detailed information about GEODI logs on the GEODI Logs page.

For SIEM integration, the process is simple:
Configure your SIEM system to monitor the log directories specified on that page. No additional connectors or agents are required.

This setup enables real-time monitoring of system activity, security events, and action traces directly from GEODI.

Frequently Asked Questions

  1. GEODI and Modules are constantly being developed. As a result of the development (other than resolved problems), better performance, more accurate discovery, higher speed, less dependency on system sources, and more features for both the user and the system administrator are added. Updates come out monthly; we suggest you follow them.

  2. Update information can be followed on the GEODI Download webpage.

  1. No, GEODI will stop the service automatically and start it again when the system starts. There is no need for manual intervention.

  2. Index Changed Content and Scheduled Index Backup are active by default. As long as you don’t change these settings, you don’t lose anything in unexpected shutdowns (Killing the service manually, Power outage, etc.)

You should apply the method that is explained in GEODI Server Installation | License Update page. Then, you should restart the service.

Yes, each GEODI can discover the same or different data sources. Management and reporting are centralized through the Master GEODI.

Yes, you can set up a redundant configuration for high availability. GEODI also supports an active-active configuration.

 

Troubleshooting

  1. Control your licence. If you are using a trial license, ensure it is not expired.

  2. SystemSettings.json may not be a valid *.json file. UTF-8 and make sure it is valid.

  3. There may be an invalid value in SystemSettings.json (AppDataFolder or AppPort values.)

  4. The disk may be full.

  5. Control engine and app errors under %appdata%/Logs directory.

  1. Is the service user still valid and has enough permissions? The password may be changed.

  2. The service users must have read/write/delete permissions in GeodiDataFolder at the minimum.

  1. Check if the user can access GeodiDataFolder in the .exe or the service mode.

  2. Make sure other processes do not use files.

  3. This situation occurs when different projects back up to the same target directory. Revert to default settings or check your projects.

  1. For update, server must have access to DECE-STORE and decesoftware.com. If it cannot access to DECE-STORE, you can follow offline update procedure.

  1. Your license may be expired.

  2. If you get the error during the first activation phase, there may be a problem accessing DECE servers(DECE-STORE), and you may need an offline installation.

  1. You should delete the %appdata%DeceAuthentication directory. This action will return the system to the very beginning.

  2. As a precaution, we suggest you create a backup user with “Edit Permission“ authorization.

You can change the index location using the settings in GEODI Server Installation | GEODI AppDataFolder

Related content