Before you start
RebootGuard has two components: the Master Console, a Windows app installed on the admin or cashier PC, and the Client agent, a Windows service installed on each gaming PC. All devices are managed from the Master, and the license is activated on the Master only.
- Take a full backup or disk image of every PC before enabling protection, especially Windows Pro PCs, which need their disk layout prepared.
- Prepare each PC in the clean state you want first: drivers, games, launchers and Windows settings. The state the PC is in when protection is enabled is the state it returns to after every restart.
- Make sure you have administrator rights on every PC.
- Check the system requirements page to confirm the Windows edition and free disk space are suitable.
Do not start the VHDX engine setup on Windows Pro without a recent backup. Any change to disk layout carries some risk, however carefully it is done.
Network and port planning
The Master communicates with clients over the local network. A stable wired network is recommended, with the Master and the gaming PCs on the same subnet.
| Port | Protocol | Direction | Purpose |
|---|---|---|---|
| 47811 | TCP | Client to Master | Encrypted TLS WebSocket connection for commands and status |
| 47810 | UDP | Broadcast from Master on the LAN | Signed discovery beacons clients use to find the Master |
The installers create Windows Firewall rules for these ports automatically. If you use a third-party firewall, you may need to add the rules manually.
UDP broadcast beacons do not cross routers. If PCs are on a different subnet or VLAN from the Master, add the Master's address manually in the client settings.
Installing the Master Console
- 1Download the Master installer from the Downloads page and verify it (see the verification section below).
- 2Run the installer as administrator on the admin or cashier PC.
- 3The required .NET runtime is included with the installer; no separate download is needed.
- 4Allow the installer to create the firewall rules when prompted.
- 5When installation finishes, open the Master Console and continue to license activation.
Give the Master PC a static IP address or a DHCP reservation in your router so devices can always reach it.
Activating your license
The license is activated on the Master only, using the activation code from the Customer Portal on our website. Activation requires an internet connection.
- 1Sign in to the Customer Portal and copy your license's activation code.
- 2In the Master Console, open the license screen, paste the code and choose Activate.
- 3After activation, the Master shows the license status, the number of allowed devices and the expiry date, if any.
Each license has an offline grace period, after which the Master must reach the license server again to renew. To move the license to another PC, deactivate it on the current Master first, or request a transfer from the Customer Portal.
Exporting the enrollment bundle
The enrollment bundle is a file exported from the Master and passed to the Client installer, so the client knows which Master it belongs to and trusts only that Master.
- The bundle contains the Master id, its public key and its TLS certificate thumbprint.
- It contains no secrets, private keys or passwords.
- Keep a backup of the bundle and your license details in a safe place outside the Master PC.
The client pins the Master's public key at enrollment and from then on rejects any command that is unsigned or signed by a different key.
Installing the Client on gaming PCs
- 1Copy the Client installer and the enrollment bundle to the gaming PC (USB drive or shared folder).
- 2Run the Client installer as administrator and select the enrollment bundle when asked.
- 3The installer creates a Windows service and the required firewall rules.
- 4After installation, the client looks for the Master on the LAN and appears there as 'Awaiting approval'.
To check that the gaming PC can reach the Master's port, run the following, replacing the address with your Master PC's address:
Test-NetConnection -ComputerName 192.168.1.10 -Port 47811Approving new devices
No new device is managed until an admin approves it. New devices appear in the Master grid with the state 'Awaiting approval'.
- 1Check that the device name and address match a PC you know is in your venue.
- 2Approve the device, and optionally add it to a group (for example: VIP room or first floor).
- 3Once approved, the device starts reporting its status about every 30 seconds.
Do not approve a device you do not recognize. If an unexpected device appears, check your network before approving it.
Choosing the protection engine
RebootGuard uses only Windows-supported technologies and picks the engine based on the Windows edition:
| Windows edition | Engine | How it works |
|---|---|---|
| Enterprise, Education and IoT Enterprise | Unified Write Filter (UWF) | Writes to the protected volume are redirected to a temporary overlay that is cleared at reboot |
| Pro | Native-boot VHDX differencing disk | Windows boots from a parent VHDX, and changes go to a differencing disk that is discarded and recreated at reboot |
To check the Windows edition on a PC:
(Get-CimInstance Win32_OperatingSystem).CaptionRebootGuard does not disable Secure Boot, Microsoft Defender or Memory Integrity (HVCI), and uses no kernel modifications.
Setting up the VHDX engine on Windows Pro
On Windows Pro, the setup wizard prepares the disk layout: it creates the parent VHDX that holds the operating system, reserves space for the differencing disk and adds the boot entry.
- 1Take a full backup or disk image before you start.
- 2Make sure there is enough free space: at least 64 GB free is recommended for the parent VHDX and the differencing disk.
- 3Run the setup wizard from the client or the Master and follow the steps.
- 4The PC will restart one or more times during setup; do not power it off.
- 5When finished, confirm the device appears in the Master with the expected state.
To see free space on your volumes:
Get-Volume | Where-Object DriveLetter | Select-Object DriveLetter, FileSystemLabel, SizeRemaining, SizeThe VHDX engine adds a boot menu entry that lets you fall back to the original system in an emergency. Do not delete this entry.
Verifying downloaded files
Every file on the Downloads page comes with a SHA-256 hash and an Authenticode digital signature. Check both before running it:
Get-FileHash -Algorithm SHA256 .\RebootGuard-Setup.exe
Get-AuthenticodeSignature .\RebootGuard-Setup.exe- The Hash value must match the hash published on the Downloads page exactly.
- The signature status must be Valid and the publisher must be Star Soft.
If the hash does not match or the signature is not valid, do not run the file. Delete it and contact support from the Support page.
User guide
Day-to-day management from the Master Console: one-click protection, maintenance modes, exclusions, the overlay, and updating Windows and games.
Troubleshooting
Fixes for common problems: devices not appearing or offline, changes not saved or not discarded, overlay full, license errors and anti-cheat issues.
System requirements
Supported Windows versions and the hardware, disk and network requirements for the Master and gaming PCs. These requirements are a draft and may change with testing.
Still need help?
Our team answers tickets from licensed and trial customers.