Skip to content

Install Acutis Gate

Gate comes in three editions. They do the same job and use the same console; pick the one that fits where your people and files are.

Edition Best for Where the AI model runs
Hosted Trying Gate, cloud apps, small teams Your choice of AI client
Windows Server Active Directory shops with Windows file shares Your local chat, anywhere on your network
Linux or Mac appliance Everything in one box, including a local model and chat On the box (on a Mac Studio, on its GPU)

Want every click, with an example office? See the step-by-step setups.

Every edition is $5 per person per month with a 14-day trial. See License & billing.

Hosted

  1. Sign in at app.acutisgo.com/gate. Every account sets up two-factor sign-in once.
  2. Open License and press Subscribe to start the trial.
  3. Go to Connect an AI and copy your endpoint.

Nothing to install. Hosted Gate reaches apps on the internet; for Windows file shares on your own network, use the Windows Server edition or the appliance.

Windows Server

You need: Windows Server 2019, 2022 or 2025 joined to your domain, a DNS name for Gate (for example gate.corp.example), and to be signed in as a domain admin while it installs.

  1. Download the signed installer: AcutisGate-Windows.msi.
  2. Run it, then open Start → Acutis Gate → Set up Acutis Gate. It asks nothing unless something needs your decision.
  3. Open https://<gate name>/signup and create the first Gate admin.
  4. License: load your license file (from License in your account at app.acutisgo.com).
  5. Identity → Active Directory is already filled in. Press Connect.
  6. Health check → Run all checks names anything left to fix.
What the setup does for you
  • A group Managed Service Account (acutisgate$), so nobody ever types or rotates a password. Its only right on the server is "Log on as a service".
  • The HTTP/<gate name> service name, so browsers can sign people in with Kerberos.
  • A certificate from your company CA (or the .pfx you give it).
  • The Acutis Gate service and the Acutis Gate File Broker, which opens file shares as each person, read-only.
  • A firewall rule for port 443, and the Group Policy that lets Edge and Chrome send people's Windows sign-in to Gate.
Options, and if you are not a domain admin

Run the setup yourself in an administrator PowerShell in C:\Program Files\Acutis Gate\Setup:

.\Install-AcutisGate.ps1 -LicenseFile C:\Downloads\acutis-gate.license -DnsName gate.corp.example

Other options: -CertPfx C:\certs\gate.pfx and -SkipGpo. Without domain admin rights, the setup stops before changing Active Directory and prints the one or two lines a domain admin runs; then run it again.

Your data, secrets, certificate and license live in C:\ProgramData\AcutisGate. Back that folder up.

Linux or Mac appliance

One package installs Gate, its database, HTTPS, the Open WebUI chat and a local model.

You need:

  • Linux: Ubuntu 22.04 or 24.04, or Debian 12. 8 GB RAM minimum, 16 GB or more for a better model, 40 GB disk.
  • Mac: macOS 13 or later, Homebrew and the Ollama app. The model runs on the Mac's GPU; a Mac Studio M5 Max runs Qwen 3.8 27B, and an M5 Ultra runs Qwen 3.8 Flash-Next.
  • Either one: a DNS name for Gate, and your license file.
curl -fsSLO https://get.acutisgo.com/dl/AcutisGate-Linux.tar.gz
tar xzf AcutisGate-Linux.tar.gz && cd AcutisGate-Linux-*
sudo bash install.sh --name gate.corp.example --license ~/acutis-gate.license

Run as yourself, not with sudo. It installs into ~/AcutisGate.

curl -fsSLO https://get.acutisgo.com/dl/AcutisGate-Mac.tar.gz
tar xzf AcutisGate-Mac.tar.gz && cd AcutisGate-Linux-*
bash install.sh --name gate.corp.example --license ~/acutis-gate.license

It takes about 10 minutes, mostly downloading. Then:

  1. Open https://<gate name>/signup and create the first Gate admin.
  2. Identity → Active Directory: your domain, a service account and its password (used once, never stored).
  3. The chat is at https://<gate name>:8443. Its first account becomes its admin. Connect it as in Connect an AI.
Installer options
Option What it does
--cert gate.crt --key gate.key Use your own certificate. Without it, the installer makes a Gate CA on the box; trust tls/ca.crt on your PCs.
--model none or --model qwen2.5:7b The local chat model. Default: picked by the memory in the box.
--dir /opt/acutis-gate The install folder (Mac default: ~/AcutisGate).

Back up gate-appliance/.env and gate-appliance/tls in the install folder.

Upgrade

  • Windows Server: install the new MSI, then run Set up Acutis Gate again. The database is backed up first.
  • Linux or Mac: unpack the new package and run its install.sh again.

Code is replaced; your data, secrets, certificate and license are kept.

Remove

  • Windows Server: Start → Acutis Gate → Remove Acutis Gate services (keeps your data), then uninstall Acutis Gate in Settings → Apps. To delete the data too, run .\Uninstall-AcutisGate.ps1 -RemoveData.
  • Linux or Mac: in gate-appliance in the install folder, docker compose down keeps the data; docker compose down -v deletes it too.

Checksums for every download are next to it on get.acutisgo.com (.sha256).