Installation procedure

Make sure to review Requirements and compatibility and Installation prerequisites. It is assumed at this stage that prerequisite requirements are met.

Step 1. Start the installation by running the MSI package

Installer Loading

Welcome window appears.


Click Next.

Step 2. Read the license text and if you agree, accept the license


You may install Querona only after you accept the license. If you agree click Next, otherwise click Cancel to abort the installation.

Step 3. Select destination folder and metabase hosting database engine

Destination folder


We assume the selection of the MS SQL Server engine. If SqLite engine is selected, skip Step 4.

Step 4. Provide database server name


The deployment of metadata databases to different servers is not supported by the installer. Both databases need to be installed on the same machine.

Provide database server name you want to host Querona metabase and Spark metastore databases on.



Do not enter “(local)” alias for local Microsoft SQL Server database, because it will break Apache Spark. For local database always use localhost with optional instance name like localhost\myinstance.

If you want to skip automatic deployment if Querona and Apache Spark metabases, uncheck the “Install or upgrade metabases” checkbox.

Click Next.

Step 5. Provide configuration of the Windows service

Service credentials

Please choose the proper settings using the table below:







not required (leave empty)

The NetworkService account is a predefined local account used by the service control manager. It has minimum privileges on the local computer and acts as the computer on the network. This account does not have a password, so any password information that you provide is ignored. A service that runs in the context of the NetworkService account presents the computer’s credentials to remote servers. By default, the remote token contains SIDs for the Everyone and Authenticated Users groups.



not required (leave empty)

The LocalService account is a predefined local account used by the service control manager. It has minimum privileges on the local computer and presents anonymous credentials on the network. This account does not have a password, so any password information that you provide is ignored.

Machine name

<custom local user>

enter local user password

Local user account created on machine you install on.

Domain name

<custom domain user>

enter domain user password

Domain user account from your company domain.

Two scenarios are common for choosing the service account:



Local computer Network Service (NT AUTHORITY\NetworkService).

To authenticate using computer account pick NetworkService as service user name and NT AUTHORITY as NetBIOS domain name. A password is not required and ignored if entered.

Designated Active Directory user (NETBIOS_DOMAIN\user_name), for example CONTOSO\queronaSvc.

To authenticate using designated AD user, pick domain from the list or enter domain name manually, then enter the user name and provide password designated for the user name entered.

Click Next.

Service user name and password will be validated against Active Directory (AD) or local store respectively. In case you provide wrong credentials, an error message will be displayed:

Service credentials

Click Ok and correct credentials entered until validation passes.

Step 6. Configure instance parameters

Instance configuration

Provide custom TDS port, Web port, and Web SSL port, or accept the defaults. Installer will verify that designated network ports are available. If any of the port is in use, a warning will appear. Port availability check can be skipped by ticking the check box Skip network port “in use” check during installation.

If you require Secure Sockets Layer (SSL) to be enabled, check the Require SSL for Administrative Portal and WebApi checkbox. Installer loads a list of all certificates from the local machine store, verifies them and presents in a dropdown list. If a friendly name is available, it will be used in a drop down list along with the first six characters from the certificate thumbprint. Verified certificates are marked with “(VERIFIED)” name postfix which means that they passed the X.509 chain validation.


Certificate has to have a private key. It is recommended to choose from verified certificates. Certificates that do not pass verification may not work. In such case you will not be able to connect to Querona Administrative Portal over SSL even if installation is successful.

Select the desired certificate from the list and installer will take care of configuring proper certificate binding in Windows.

Click Next.

Step 7. In the confirmation dialog click Install and allow for privilege elevation

Confirm installation

A progress windows will appear. Wait for the installation to finish.

Installation progress

When the installation completes successfully click Finish.

Installation finished

Post-installation steps

  1. Launch Web Administrative portal by navigating to http://localhost, assuming you are logged on to Querona Windows server using Remote Desktop.

  2. Provide administrative credentials to log in. By default, all users that belong to local Administrators group on a machine hosting Querona, have administrative privileges. If you want to logon using built-in credentials, use the default user/password: admin/admin. Default behavior and security settings can be changed using Querona Administrative Portal, as described in Configuration section.

  3. Follow the steps described in Configuration Settings and Security section.