Applications

GnuCash User Guide

| Product: GnuCash

Overview

This guide provides comprehensive instructions for deploying and using the cloudimg GnuCash AMI on Amazon Web Services. The AMI delivers a fully preconfigured Windows Server instance with GnuCash installed and ready to use, enabling you to manage personal or small business finances immediately after launch.

GnuCash is a free, open source accounting application designed for individuals and small businesses. It uses a double entry bookkeeping system and supports features such as accounts receivable, accounts payable, invoicing, tax reporting, financial statements, scheduled transactions, and multi currency support. GnuCash can import transactions from bank statements in QIF, OFX, and CSV formats.

This AMI is ideal for small business owners who need a centralized accounting system accessible from anywhere, accountants who manage multiple client books remotely, or individuals who want a secure, cloud hosted financial management tool. Running GnuCash on an AWS instance ensures your financial data is stored in a controlled environment with the ability to take regular backups using AWS services.

For any issues encountered while following this guide, please contact support@cloudimg.co.uk.


Prerequisites

Before launching the GnuCash AMI, ensure you have the following in place.

AWS Account You need an active AWS account with permissions to launch EC2 instances, manage security groups, and access the AWS Marketplace.

EC2 Key Pair Create or identify an existing EC2 key pair in the region where you plan to launch the instance. This key pair is required to decrypt the Windows Administrator password after launch.

Security Group Prepare a security group that allows inbound RDP access. The required rule is outlined below.

Protocol Type Port Description
RDP TCP 3389 Remote Desktop Access

It is strongly recommended to restrict the source IP range for RDP access to your known IP addresses or corporate CIDR blocks rather than allowing access from 0.0.0.0/0. This is especially important when the instance will contain sensitive financial data.

Remote Desktop Client Install a Remote Desktop Protocol client on your local machine. Options include Microsoft Remote Desktop (available for Windows and macOS), Remmina (Linux), or any other RDP compatible client.

Minimum Instance Requirements

Minimum CPU Minimum RAM Required Disk Space
1 vCPU 1 GB 30 GB

A t3.small instance type is sufficient for most GnuCash workloads. GnuCash is a lightweight application and does not require significant compute resources.


Step by Step Setup

Follow the steps below to launch and connect to your GnuCash instance.

Step 1: Launch the Instance

  1. Log in to your AWS account and navigate to the AWS Marketplace.
  2. Search for the cloudimg GnuCash AMI.
  3. Select your desired instance type (t3.small or larger is recommended).
  4. Choose your preferred region and VPC configuration.
  5. Select the EC2 key pair you created in the prerequisites.
  6. Assign the security group with RDP access on port 3389.
  7. Configure storage (30 GB minimum on the root volume).
  8. Launch the instance.

Step 2: Wait for Status Checks

After launching the instance, navigate to the EC2 console and wait for the instance to show 2/2 status checks passing. This ensures the instance has fully booted and Windows has completed its initial setup. This process typically takes between 3 and 10 minutes.

Step 3: Retrieve the Administrator Password

  1. Open the EC2 console in the AWS region where you launched the instance.
  2. Select Instances from the left navigation panel.
  3. Locate and select your newly launched instance.
  4. Click Actions at the top of the page.
  5. Navigate to Security and then select Get Windows password.
  6. Click Browse and upload the private key file (.pem) from the key pair you selected during launch.
  7. Click Decrypt password.
  8. Copy the decrypted password and store it securely. This is your Administrator password.

Step 4: Connect via Remote Desktop

  1. Open your Remote Desktop client application.
  2. Create a new connection using the public IP address of your EC2 instance (or the private IP if connecting through a VPN or from within the same VPC).
  3. Enter the following credentials when prompted:
  4. Username: Administrator
  5. Password: The decrypted value from Step 3
  6. If a certificate warning appears, click Continue to proceed. This is expected for new connections.
  7. You will be connected to the Windows Server desktop.

Step 5: Launch GnuCash

Once connected to the desktop, locate the GnuCash shortcut icon on the desktop and double click it to launch the application. GnuCash is preinstalled and ready for use immediately.


Server Components

The following software components are preinstalled on this AMI.

Component Version
GnuCash Latest

The AMI is built on Windows Server and includes the base operating system along with GnuCash preinstalled and configured. GnuCash includes all standard accounting modules and supports multiple data storage formats.


Filesystem Layout

The instance uses a single volume configuration.

Drive Purpose Minimum Size
C:\ Operating system and application 30 GB

Key directory locations on the instance:

Path Description
C:\Program Files (x86)\gnucash\ GnuCash installation directory
C:\Users\Administrator\Desktop\ Desktop with GnuCash shortcut
C:\Users\Administrator\Documents\ Default location for GnuCash data files
C:\Users\Administrator.gnucash\ User preferences and configuration

GnuCash data files are typically small, so the default 30 GB volume will be more than sufficient for most use cases. If you maintain accounting records for many years or multiple businesses, consider organizing data files into clearly named directories under the Documents folder.


Managing the Application

First Launch and Account Setup

When you first launch GnuCash, you will be presented with a welcome dialog that guides you through creating your first set of books. Follow these steps:

  1. Click Create a new set of accounts to start the account setup wizard.
  2. Select your preferred currency (GBP, USD, EUR, or any of the many supported currencies).
  3. Choose an account template that matches your needs. Options include personal accounts, business accounts, and more specialized templates.
  4. Review the suggested account hierarchy and make any adjustments.
  5. Click Apply to create your account structure.

Opening an Existing Data File

To open an existing GnuCash data file, navigate to File then Open and browse to the location of your .gnucash file. GnuCash supports its own XML based file format as well as SQLite databases.

Recording Transactions

  1. Open the account register by double clicking on an account in the Accounts tab.
  2. Enter the transaction date, description, transfer account, and amount.
  3. Press Enter to record the transaction.
  4. GnuCash automatically updates account balances using the double entry system.

Importing Bank Statements

GnuCash can import transactions from your bank in multiple formats:

  1. Navigate to File then Import and select the appropriate format (QIF, OFX/QFX, or CSV).
  2. Browse to the downloaded statement file from your bank.
  3. Follow the import wizard to map accounts and review transactions.
  4. Click Apply to import the matched transactions.

Creating Invoices

For business accounting, GnuCash includes invoicing capabilities:

  1. Navigate to Business then Customer then New Invoice.
  2. Select the customer and fill in the invoice details.
  3. Add line items with descriptions, quantities, and prices.
  4. Post the invoice to record it in your accounts.
  5. Print or export the invoice for delivery to the customer.

Generating Reports

GnuCash includes a comprehensive set of financial reports:

  1. Navigate to Reports from the menu bar.
  2. Select the type of report you need (Profit and Loss, Balance Sheet, Cash Flow, Tax Report, and many more).
  3. Configure the date range and other parameters.
  4. The report will be generated and displayed in a new tab.
  5. Reports can be exported to HTML format for printing or sharing.

Scheduled Transactions

For recurring transactions such as rent, utilities, or salaries:

  1. Navigate to Actions then Scheduled Transactions then Scheduled Transaction Editor.
  2. Create a new scheduled transaction with the amount, frequency, and accounts.
  3. GnuCash will automatically create these transactions at the specified intervals.

Scripts and Logs

GnuCash Data Files

GnuCash stores financial data in files with the .gnucash extension. These files contain your complete chart of accounts, transaction history, and configuration.

File Location Description
C:\Users\Administrator\Documents*.gnucash GnuCash data files
C:\Users\Administrator\Documents*.gnucash.*.log Transaction log files
C:\Users\Administrator\Documents*.gnucash.*.xac Backup files created on each save

GnuCash automatically creates backup files and transaction logs alongside your main data file. The .log files record individual transactions and can be used to recover data. The .xac files are timestamped backups of the entire data file.

Windows Event Logs

For system level diagnostics, use the Windows Event Viewer. Press the Windows key, search for Event Viewer, and open it to review application and system logs.


Troubleshooting

Cannot connect via RDP

  • Verify that the instance has passed 2/2 status checks in the EC2 console.
  • Confirm that your security group allows inbound TCP traffic on port 3389 from your IP address.
  • Ensure you are using the correct public IP address. If the instance was stopped and started, the public IP may have changed unless you are using an Elastic IP.
  • Check that your local firewall or corporate network is not blocking outbound RDP connections.

Password decryption fails

  • Ensure you are uploading the correct .pem file that matches the key pair selected during instance launch.
  • The password may take up to 15 minutes to become available after the first launch. Wait and try again if the option is greyed out.

GnuCash does not open or crashes on launch

  • Try launching GnuCash again. If it crashes repeatedly, check whether a lock file exists alongside your data file and delete it if GnuCash was not cleanly shut down.
  • Verify that the C: drive has sufficient free space.
  • Check the Windows Event Viewer for application error messages related to GnuCash.

Cannot import bank statements

  • Ensure the statement file is in a supported format (QIF, OFX, QFX, or CSV).
  • If importing CSV files, verify that the date format and column mappings match the expected layout.
  • Some banks provide statements in formats that require specific import settings. Refer to the GnuCash documentation for guidance on your bank's format.

Data file appears corrupted

  • GnuCash creates automatic backups (.xac files) alongside your main data file. Look for the most recent .xac file in the same directory as your data file and open it to recover your data.
  • Transaction log (.log) files can also be used to replay transactions if needed.
  • Always keep multiple copies of your financial data by using the backup strategies described in the Security Recommendations section.

Reports display incorrect data

  • Verify the date range selected for the report matches the period you intend to review.
  • Ensure all transactions are properly recorded and balanced. Unbalanced transactions may cause discrepancies in reports.
  • Check that the correct accounts are included in the report parameters.

RDP session disconnects frequently

  • Check your network connection stability.
  • Adjust the RDP client settings to reduce bandwidth requirements by lowering the display quality or disabling visual effects.
  • Ensure the instance is not running out of memory, which could cause Windows to become unresponsive.

Security Recommendations

Change the Administrator Password

After your first login, change the default Administrator password to a strong, unique password. Open the Windows command prompt or PowerShell and run:

net user Administrator YourNewStrongPassword

Note that once you change the password, the original decrypted password from the AWS console will no longer be valid.

Restrict RDP Access

Limit the security group rule for port 3389 to only your specific IP addresses or a trusted CIDR range. Avoid using 0.0.0.0/0, which would expose the instance to RDP brute force attacks from the entire internet. This is especially critical for an instance containing financial data.

Protect Financial Data

GnuCash data files contain sensitive financial information. Ensure that only authorized users have access to the instance via RDP. Consider setting up additional Windows user accounts with appropriate permissions if multiple people need access.

Regular Backups

Implement a regular backup strategy for your GnuCash data files:

  • Use AWS EBS snapshots to create point in time backups of the entire volume. Schedule automated snapshots using Amazon Data Lifecycle Manager.
  • Copy your .gnucash data files to Amazon S3 regularly for offsite backup. You can use the AWS CLI or a file transfer tool to upload files to S3.
  • Keep GnuCash's built in backup files (.xac files) and do not delete them until you have verified your primary backups.

Enable Encryption

Consider enabling EBS encryption on the volume to protect financial data at rest. If you are creating a new instance, select an encrypted volume type during launch. For existing volumes, you can create an encrypted snapshot and restore from it.

Enable Windows Firewall Rules

Review and configure the Windows Firewall to restrict inbound and outbound traffic to only what is necessary for your workflow.

Keep Software Updated

Regularly update GnuCash and Windows Server to ensure you have the latest security patches and bug fixes.

Use an Elastic IP

Assign an Elastic IP to your instance to maintain a consistent IP address across stop and start cycles. This also allows you to maintain consistent firewall rules.

Enable CloudWatch Monitoring

Configure Amazon CloudWatch to monitor your instance metrics such as CPU utilization, memory usage, and disk space. Set up alarms to notify you if resources are running low.

Audit Access

Enable AWS CloudTrail to log all API activity related to your EC2 instance. This provides an audit trail of who accessed or modified the instance and when.


Support

If you encounter any issues not covered in this guide, the cloudimg support team is available to help.

  • Email: support@cloudimg.co.uk
  • Phone: (+44) 02045382725
  • Website: www.cloudimg.co.uk
  • Address: 3rd Floor, 86 90 Paul Street, London, EC2A 4NE

Support is available for any issues related to the AMI, including connectivity problems, software configuration, and general guidance on using the preconfigured environment.

When contacting support, please include your EC2 instance ID, the AWS region, and a description of the issue along with any relevant error messages or screenshots.