GnuCash User Guide
Overview
This guide provides comprehensive instructions for deploying and using the cloudimg GnuCash AMI on Amazon Web Services. The AMI delivers a fully preconfigured Windows Server instance with GnuCash installed and ready to use, enabling you to manage personal or small business finances immediately after launch.
GnuCash is a free, open source accounting application designed for individuals and small businesses. It uses a double entry bookkeeping system and supports features such as accounts receivable, accounts payable, invoicing, tax reporting, financial statements, scheduled transactions, and multi currency support. GnuCash can import transactions from bank statements in QIF, OFX, and CSV formats.
This AMI is ideal for small business owners who need a centralized accounting system accessible from anywhere, accountants who manage multiple client books remotely, or individuals who want a secure, cloud hosted financial management tool. Running GnuCash on an AWS instance ensures your financial data is stored in a controlled environment with the ability to take regular backups using AWS services.
For any issues encountered while following this guide, please contact support@cloudimg.co.uk.
Prerequisites
Before launching the GnuCash AMI, ensure you have the following in place.
AWS Account You need an active AWS account with permissions to launch EC2 instances, manage security groups, and access the AWS Marketplace.
EC2 Key Pair Create or identify an existing EC2 key pair in the region where you plan to launch the instance. This key pair is required to decrypt the Windows Administrator password after launch.
Security Group Prepare a security group that allows inbound RDP access. The required rule is outlined below.
| Protocol | Type | Port | Description |
|---|---|---|---|
| RDP | TCP | 3389 | Remote Desktop Access |
It is strongly recommended to restrict the source IP range for RDP access to your known IP addresses or corporate CIDR blocks rather than allowing access from 0.0.0.0/0. This is especially important when the instance will contain sensitive financial data.
Remote Desktop Client Install a Remote Desktop Protocol client on your local machine. Options include Microsoft Remote Desktop (available for Windows and macOS), Remmina (Linux), or any other RDP compatible client.
Minimum Instance Requirements
| Minimum CPU | Minimum RAM | Required Disk Space |
|---|---|---|
| 1 vCPU | 1 GB | 30 GB |
A t3.small instance type is sufficient for most GnuCash workloads. GnuCash is a lightweight application and does not require significant compute resources.
Step by Step Setup
Follow the steps below to launch and connect to your GnuCash instance.
Step 1: Launch the Instance
- Log in to your AWS account and navigate to the AWS Marketplace.
- Search for the cloudimg GnuCash AMI.
- Select your desired instance type (t3.small or larger is recommended).
- Choose your preferred region and VPC configuration.
- Select the EC2 key pair you created in the prerequisites.
- Assign the security group with RDP access on port 3389.
- Configure storage (30 GB minimum on the root volume).
- Launch the instance.
Step 2: Wait for Status Checks
After launching the instance, navigate to the EC2 console and wait for the instance to show 2/2 status checks passing. This ensures the instance has fully booted and Windows has completed its initial setup. This process typically takes between 3 and 10 minutes.
Step 3: Retrieve the Administrator Password
- Open the EC2 console in the AWS region where you launched the instance.
- Select Instances from the left navigation panel.
- Locate and select your newly launched instance.
- Click Actions at the top of the page.
- Navigate to Security and then select Get Windows password.
- Click Browse and upload the private key file (.pem) from the key pair you selected during launch.
- Click Decrypt password.
- Copy the decrypted password and store it securely. This is your Administrator password.
Step 4: Connect via Remote Desktop
- Open your Remote Desktop client application.
- Create a new connection using the public IP address of your EC2 instance (or the private IP if connecting through a VPN or from within the same VPC).
- Enter the following credentials when prompted:
- Username: Administrator
- Password: The decrypted value from Step 3
- If a certificate warning appears, click Continue to proceed. This is expected for new connections.
- You will be connected to the Windows Server desktop.
Step 5: Launch GnuCash
Once connected to the desktop, locate the GnuCash shortcut icon on the desktop and double click it to launch the application. GnuCash is preinstalled and ready for use immediately.
Server Components
The following software components are preinstalled on this AMI.
| Component | Version |
|---|---|
| GnuCash | Latest |
The AMI is built on Windows Server and includes the base operating system along with GnuCash preinstalled and configured. GnuCash includes all standard accounting modules and supports multiple data storage formats.
Filesystem Layout
The instance uses a single volume configuration.
| Drive | Purpose | Minimum Size |
|---|---|---|
| C:\ | Operating system and application | 30 GB |
Key directory locations on the instance:
| Path | Description |
|---|---|
| C:\Program Files (x86)\gnucash\ | GnuCash installation directory |
| C:\Users\Administrator\Desktop\ | Desktop with GnuCash shortcut |
| C:\Users\Administrator\Documents\ | Default location for GnuCash data files |
| C:\Users\Administrator.gnucash\ | User preferences and configuration |
GnuCash data files are typically small, so the default 30 GB volume will be more than sufficient for most use cases. If you maintain accounting records for many years or multiple businesses, consider organizing data files into clearly named directories under the Documents folder.
Managing the Application
First Launch and Account Setup
When you first launch GnuCash, you will be presented with a welcome dialog that guides you through creating your first set of books. Follow these steps:
- Click Create a new set of accounts to start the account setup wizard.
- Select your preferred currency (GBP, USD, EUR, or any of the many supported currencies).
- Choose an account template that matches your needs. Options include personal accounts, business accounts, and more specialized templates.
- Review the suggested account hierarchy and make any adjustments.
- Click Apply to create your account structure.
Opening an Existing Data File
To open an existing GnuCash data file, navigate to File then Open and browse to the location of your .gnucash file. GnuCash supports its own XML based file format as well as SQLite databases.
Recording Transactions
- Open the account register by double clicking on an account in the Accounts tab.
- Enter the transaction date, description, transfer account, and amount.
- Press Enter to record the transaction.
- GnuCash automatically updates account balances using the double entry system.
Importing Bank Statements
GnuCash can import transactions from your bank in multiple formats:
- Navigate to File then Import and select the appropriate format (QIF, OFX/QFX, or CSV).
- Browse to the downloaded statement file from your bank.
- Follow the import wizard to map accounts and review transactions.
- Click Apply to import the matched transactions.
Creating Invoices
For business accounting, GnuCash includes invoicing capabilities:
- Navigate to Business then Customer then New Invoice.
- Select the customer and fill in the invoice details.
- Add line items with descriptions, quantities, and prices.
- Post the invoice to record it in your accounts.
- Print or export the invoice for delivery to the customer.
Generating Reports
GnuCash includes a comprehensive set of financial reports:
- Navigate to Reports from the menu bar.
- Select the type of report you need (Profit and Loss, Balance Sheet, Cash Flow, Tax Report, and many more).
- Configure the date range and other parameters.
- The report will be generated and displayed in a new tab.
- Reports can be exported to HTML format for printing or sharing.
Scheduled Transactions
For recurring transactions such as rent, utilities, or salaries:
- Navigate to Actions then Scheduled Transactions then Scheduled Transaction Editor.
- Create a new scheduled transaction with the amount, frequency, and accounts.
- GnuCash will automatically create these transactions at the specified intervals.
Scripts and Logs
GnuCash Data Files
GnuCash stores financial data in files with the .gnucash extension. These files contain your complete chart of accounts, transaction history, and configuration.
| File Location | Description |
|---|---|
| C:\Users\Administrator\Documents*.gnucash | GnuCash data files |
| C:\Users\Administrator\Documents*.gnucash.*.log | Transaction log files |
| C:\Users\Administrator\Documents*.gnucash.*.xac | Backup files created on each save |
GnuCash automatically creates backup files and transaction logs alongside your main data file. The .log files record individual transactions and can be used to recover data. The .xac files are timestamped backups of the entire data file.
Windows Event Logs
For system level diagnostics, use the Windows Event Viewer. Press the Windows key, search for Event Viewer, and open it to review application and system logs.
Troubleshooting
Cannot connect via RDP
- Verify that the instance has passed 2/2 status checks in the EC2 console.
- Confirm that your security group allows inbound TCP traffic on port 3389 from your IP address.
- Ensure you are using the correct public IP address. If the instance was stopped and started, the public IP may have changed unless you are using an Elastic IP.
- Check that your local firewall or corporate network is not blocking outbound RDP connections.
Password decryption fails
- Ensure you are uploading the correct .pem file that matches the key pair selected during instance launch.
- The password may take up to 15 minutes to become available after the first launch. Wait and try again if the option is greyed out.
GnuCash does not open or crashes on launch
- Try launching GnuCash again. If it crashes repeatedly, check whether a lock file exists alongside your data file and delete it if GnuCash was not cleanly shut down.
- Verify that the C: drive has sufficient free space.
- Check the Windows Event Viewer for application error messages related to GnuCash.
Cannot import bank statements
- Ensure the statement file is in a supported format (QIF, OFX, QFX, or CSV).
- If importing CSV files, verify that the date format and column mappings match the expected layout.
- Some banks provide statements in formats that require specific import settings. Refer to the GnuCash documentation for guidance on your bank's format.
Data file appears corrupted
- GnuCash creates automatic backups (.xac files) alongside your main data file. Look for the most recent .xac file in the same directory as your data file and open it to recover your data.
- Transaction log (.log) files can also be used to replay transactions if needed.
- Always keep multiple copies of your financial data by using the backup strategies described in the Security Recommendations section.
Reports display incorrect data
- Verify the date range selected for the report matches the period you intend to review.
- Ensure all transactions are properly recorded and balanced. Unbalanced transactions may cause discrepancies in reports.
- Check that the correct accounts are included in the report parameters.
RDP session disconnects frequently
- Check your network connection stability.
- Adjust the RDP client settings to reduce bandwidth requirements by lowering the display quality or disabling visual effects.
- Ensure the instance is not running out of memory, which could cause Windows to become unresponsive.
Security Recommendations
Change the Administrator Password
After your first login, change the default Administrator password to a strong, unique password. Open the Windows command prompt or PowerShell and run:
net user Administrator YourNewStrongPassword
Note that once you change the password, the original decrypted password from the AWS console will no longer be valid.
Restrict RDP Access
Limit the security group rule for port 3389 to only your specific IP addresses or a trusted CIDR range. Avoid using 0.0.0.0/0, which would expose the instance to RDP brute force attacks from the entire internet. This is especially critical for an instance containing financial data.
Protect Financial Data
GnuCash data files contain sensitive financial information. Ensure that only authorized users have access to the instance via RDP. Consider setting up additional Windows user accounts with appropriate permissions if multiple people need access.
Regular Backups
Implement a regular backup strategy for your GnuCash data files:
- Use AWS EBS snapshots to create point in time backups of the entire volume. Schedule automated snapshots using Amazon Data Lifecycle Manager.
- Copy your .gnucash data files to Amazon S3 regularly for offsite backup. You can use the AWS CLI or a file transfer tool to upload files to S3.
- Keep GnuCash's built in backup files (.xac files) and do not delete them until you have verified your primary backups.
Enable Encryption
Consider enabling EBS encryption on the volume to protect financial data at rest. If you are creating a new instance, select an encrypted volume type during launch. For existing volumes, you can create an encrypted snapshot and restore from it.
Enable Windows Firewall Rules
Review and configure the Windows Firewall to restrict inbound and outbound traffic to only what is necessary for your workflow.
Keep Software Updated
Regularly update GnuCash and Windows Server to ensure you have the latest security patches and bug fixes.
Use an Elastic IP
Assign an Elastic IP to your instance to maintain a consistent IP address across stop and start cycles. This also allows you to maintain consistent firewall rules.
Enable CloudWatch Monitoring
Configure Amazon CloudWatch to monitor your instance metrics such as CPU utilization, memory usage, and disk space. Set up alarms to notify you if resources are running low.
Audit Access
Enable AWS CloudTrail to log all API activity related to your EC2 instance. This provides an audit trail of who accessed or modified the instance and when.
Support
If you encounter any issues not covered in this guide, the cloudimg support team is available to help.
- Email: support@cloudimg.co.uk
- Phone: (+44) 02045382725
- Website: www.cloudimg.co.uk
- Address: 3rd Floor, 86 90 Paul Street, London, EC2A 4NE
Support is available for any issues related to the AMI, including connectivity problems, software configuration, and general guidance on using the preconfigured environment.
When contacting support, please include your EC2 instance ID, the AWS region, and a description of the issue along with any relevant error messages or screenshots.