GnuCash

Prerequisites

Before you launch the GnuCash AMI, have the following in place:

• AWS account. You need an active account with permission to launch EC2 instances, manage security groups and use AWS Marketplace.
• EC2 key pair. Create a key pair, or choose an existing one, in the region where you plan to launch. You need it to decrypt the Windows Administrator password after launch.
• Security group. Prepare a security group that allows inbound RDP: protocol TCP, port 3389, for Remote Desktop access.
• Remote Desktop client. Install an RDP client on your local machine, such as Microsoft Remote Desktop (Windows and macOS), Remmina (Linux) or any other RDP-compatible client.

Restrict the source range for RDP to your known IP addresses or corporate CIDR blocks. Do not allow access from 0.0.0.0/0, especially when the instance holds sensitive financial data.

Minimum instance requirements: 1 vCPU, 1 GB RAM and 30 GB of disk space.

A t3.small instance type is sufficient for most GnuCash workloads. GnuCash is a lightweight application and does not need significant compute resources.

Step by Step Setup

Follow these steps to launch your GnuCash instance and connect to it.

Step 1: Launch the instance

• Sign in to your AWS account and open AWS Marketplace.
• Search for the SecureAnyCloud GnuCash AMI.
• Select an instance type. t3.small or larger is recommended.
• Choose your region and VPC configuration.
• Select the EC2 key pair you created in the prerequisites.
• Assign the security group with RDP access on port 3389.
• Configure storage with at least 30 GB on the root volume.
• Launch the instance.

Step 2: Wait for the status checks

Open the EC2 console and wait until the instance shows 2/2 status checks passed. This confirms that the instance has fully booted and Windows has finished its initial setup. It typically takes 3 to 10 minutes.

Step 3: Retrieve the Administrator password

• Open the EC2 console in the AWS region where you launched the instance.
• Select Instances in the left navigation panel.
• Select your new instance.
• Click Actions at the top of the page.
• Go to Security and select Get Windows password.
• Click Browse and upload the private key file (.pem) from the key pair you selected at launch.
• Click Decrypt password.
• Copy the decrypted password and store it securely. This is your Administrator password.

Step 4: Connect with Remote Desktop

• Open your Remote Desktop client.
• Create a new connection to the public IP address of your EC2 instance. Use the private IP address if you connect through a VPN or from within the same VPC.
• When prompted, enter these credentials:
  • Username: Administrator
  • Password: the decrypted value from Step 3
• If a certificate warning appears, click Continue. This is expected for new connections.
• The Windows Server desktop opens.

Step 5: Launch GnuCash

On the desktop, double-click the GnuCash shortcut. GnuCash is preinstalled and ready to use immediately.

Server Components

The AMI is built on Windows Server. It includes the base operating system and the latest GnuCash release, preinstalled and configured. GnuCash includes all standard accounting modules and supports several data storage formats.

Filesystem Layout

The instance uses a single volume: drive C:\ holds the operating system and the application, with a minimum size of 30 GB.

Key directory locations on the instance:

• C:\Program Files (x86)\gnucash\ : the GnuCash installation directory
• C:\Users\Administrator\Desktop\ : the desktop, with the GnuCash shortcut
• C:\Users\Administrator\Documents\ : the default location for GnuCash data files
• C:\Users\Administrator\.gnucash\ : user preferences and configuration

GnuCash data files are typically small, so the default 30 GB volume is more than enough for most uses. If you keep accounting records for many years or for several businesses, organize your data files into clearly named directories under the Documents folder.

Managing the Application

First launch and account setup

The first time you start GnuCash, a welcome dialog guides you through creating your first set of books:

• Click Create a new set of accounts to start the account setup wizard.
• Select your currency. GBP, USD, EUR and many others are supported.
• Choose an account template that matches your needs, such as personal accounts, business accounts or a more specialized template.
• Review the suggested account hierarchy and adjust it if needed.
• Click Apply to create your account structure.

Open an existing data file

Choose File, then Open, and browse to your .gnucash file. GnuCash supports its own XML-based file format as well as SQLite databases.

Record transactions

• Double-click an account in the Accounts tab to open its register.
• Enter the transaction date, description, transfer account and amount.
• Press Enter to record the transaction.
• GnuCash updates account balances automatically using double-entry bookkeeping.

Import bank statements

GnuCash can import transactions from your bank in several formats:

• Choose File, then Import, and select the format: QIF, OFX/QFX or CSV.
• Browse to the statement file you downloaded from your bank.
• Follow the import wizard to map accounts and review transactions.
• Click Apply to import the matched transactions.

Create invoices

For business accounting, GnuCash includes invoicing:

• Choose Business, then Customer, then New Invoice.
• Select the customer and fill in the invoice details.
• Add line items with descriptions, quantities and prices.
• Post the invoice to record it in your accounts.
• Print or export the invoice for the customer.

Generate reports

GnuCash includes a comprehensive set of financial reports:

• Open Reports in the menu bar.
• Select the report you need, such as Profit and Loss, Balance Sheet, Cash Flow or Tax Report.
• Set the date range and other parameters.
• The report opens in a new tab.
• Export reports to HTML for printing or sharing.

Schedule transactions

Use scheduled transactions for recurring items such as rent, utilities or salaries:

• Choose Actions, then Scheduled Transactions, then Scheduled Transaction Editor.
• Create a scheduled transaction with the amount, frequency and accounts.
• GnuCash creates the transactions automatically at the intervals you set.

Scripts and Logs

GnuCash data files

GnuCash stores financial data in files with the .gnucash extension. Each file contains your complete chart of accounts, transaction history and configuration.

• C:\Users\Administrator\Documents\*.gnucash : GnuCash data files
• C:\Users\Administrator\Documents\*.gnucash.*.log : transaction log files
• C:\Users\Administrator\Documents\*.gnucash.*.xac : backup files created on each save

GnuCash creates backup files and transaction logs alongside your main data file. The .log files record individual transactions and can be used to recover data. The .xac files are timestamped backups of the entire data file.

Windows event logs

For system-level diagnostics, open the Windows Event Viewer. Press the Windows key, search for Event Viewer, and open it to review application and system logs.

Troubleshooting

Cannot connect via RDP

• Verify that the instance has passed 2/2 status checks in the EC2 console.
• Confirm that your security group allows inbound TCP traffic on port 3389 from your IP address.
• Check that you are using the correct public IP address. If the instance was stopped and started, the public IP may have changed unless you use an Elastic IP.
• Check that your local firewall or corporate network is not blocking outbound RDP connections.

Password decryption fails

• Make sure you upload the .pem file that matches the key pair selected at launch.
• The password can take up to 15 minutes to become available after the first launch. If the option is greyed out, wait and try again.

GnuCash does not open or crashes on launch

• Launch GnuCash again. If it crashes repeatedly, look for a lock file alongside your data file. Delete it if GnuCash was not shut down cleanly.
• Verify that the C: drive has enough free space.
• Check the Windows Event Viewer for application errors related to GnuCash.

Cannot import bank statements

• Make sure the statement file is in a supported format: QIF, OFX, QFX or CSV.
• For CSV files, verify that the date format and column mappings match the expected layout.
• Some banks provide statements in formats that need specific import settings. See the GnuCash documentation for your bank's format.

Data file appears corrupted

• GnuCash creates automatic backups (.xac files) alongside your main data file. Open the most recent .xac file in the same directory to recover your data.
• You can also use the transaction log (.log) files to replay transactions if needed.
• Keep multiple copies of your financial data using the backup strategies in the Security Recommendations section.

Reports display incorrect data

• Verify that the date range matches the period you want to review.
• Make sure all transactions are recorded and balanced. Unbalanced transactions can cause discrepancies in reports.
• Check that the right accounts are included in the report parameters.

RDP session disconnects frequently

• Check that your network connection is stable.
• Reduce the RDP bandwidth requirements by lowering the display quality or disabling visual effects in the client settings.
• Make sure the instance is not running out of memory, which can make Windows unresponsive.

Security Recommendations

Change the Administrator password

After your first sign-in, change the default Administrator password to a strong, unique one. Open the Windows command prompt or PowerShell and run:

net user Administrator YourNewStrongPassword

Once you change the password, the original decrypted password from the AWS console is no longer valid.

Restrict RDP access

Limit the security group rule for port 3389 to your own IP addresses or a trusted CIDR range. Do not use 0.0.0.0/0, which exposes the instance to RDP brute-force attacks from the entire internet. This matters most for an instance that holds financial data.

Protect financial data

GnuCash data files contain sensitive financial information. Allow only authorized users to reach the instance over RDP. If several people need access, consider creating additional Windows user accounts with appropriate permissions.

Back up regularly

Set up a regular backup strategy for your GnuCash data files:

• Use AWS EBS snapshots for point-in-time backups of the entire volume. Schedule automated snapshots with Amazon Data Lifecycle Manager.
• Copy your .gnucash data files to Amazon S3 regularly for offsite backup. You can use the AWS CLI or a file transfer tool.
• Keep GnuCash's built-in backup files (.xac files). Do not delete them until you have verified your primary backups.

Enable encryption

Consider enabling EBS encryption on the volume to protect financial data at rest. For a new instance, select an encrypted volume type at launch. For an existing volume, create an encrypted snapshot and restore from it.

Configure the Windows Firewall

Review the Windows Firewall and restrict inbound and outbound traffic to what your workflow needs.

Keep software updated

Update GnuCash and Windows Server regularly to get the latest security patches and bug fixes.

Use an Elastic IP

Assign an Elastic IP to keep a consistent IP address across stop and start cycles. This also keeps your firewall rules consistent.

Enable CloudWatch monitoring

Use Amazon CloudWatch to monitor instance metrics such as CPU utilization, memory usage and disk space. Set up alarms that notify you when resources run low.

Audit access

Enable AWS CloudTrail to log all API activity for your EC2 instance. This gives you an audit trail of who accessed or modified the instance, and when.

Support

If you have an issue that this guide does not cover, the SecureAnyCloud support team can help.

• Email: sales@secureanycloud.com
• Phone: (+44) 02045382725
• Website: secureanycloud.com
• Address: 3rd Floor, 86 90 Paul Street, London, EC2A 4NE

Support covers any issue related to the AMI, including connectivity problems, software configuration and general guidance on using the preconfigured environment.

When you contact support, include your EC2 instance ID, the AWS region, and a description of the issue with any relevant error messages or screenshots.

Deploy on AWS

Launch GnuCash with 24/7 support from SecureAnyCloud.

View on Marketplace

Need Help?

Our support team is available 24/7.

sales@secureanycloud.com