--- title: Tenant Connector Inbound Installation slug: kron-pam-installation-guides-v3/tenant-connector-inbound-installation docTags: createdAt: 2025-06-03T07:49:33.789Z --- ![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/guEMi7zg5EBL6WoGBFYuw_image.png "The Tenant Connector Inbound Option") :::hint{type="danger"} Check the Secure Boot Enabled before the installation by running**` mokutil --sb-state`** command. In case the secure boot is enabled, it might cause an error during the WireGuard installation. **Please disable it to continue the installation!** ::: The following steps should be read carefully to successfully install Tenant Connector Inbound on the machine: - Download the installation script on the machine that is used for Tenant Connector Inbound. The support team can provide the installation script. After downloading the script, unzip the installation script on the machine. The user can use the unzip command to extract the files from the installation script file. :::BlockQuote Linux CLI: \[root@ connector \~]# unzip RAP\_MTC\_CLOUD-1.4.0.zip ::: ![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/hkVpOWR3fZtYCbP9E60ir_image.png "Extracting the zipped installation script files") - Navigate to the cloud directory: :::BlockQuote Linux CLI: \[root\@connector\~]# cd cloud ::: ::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/OJfcrF46Oua1cGGaIi_iq_image.png" size="66" width="488" height="109" position="center" caption="Navigating the cloud directory" darkWidth="488" darkHeight="109" showCaption="true"} - Run the configuration script: :::BlockQuote Linux CLI: \[root\@connector\~cloud]# sh configure.sh ::: ::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/30YzEJSTEhaDXvtI6Cm8c_image.png" size="66" width="588" height="197" position="center" caption=" Starting the installation script" darkWidth="588" darkHeight="197" showCaption="true"} :::hint{type="info"} If the script fails due to insufficient file permissions, run the `chmod +x configure.sh` command. ::: :::hint{type="info"} You need root privileges to run this script. ::: - The installation script should be restarted after the forced reboot. The installation script asks to either: a) install MT Outbound Connector on the cloud, or b) install MT Inbound Connector, or c) install the Secure Remote Access Portal (RAP) module on the cloud. (The last option is not related to MT Connector) :::hint{type="warning"} If you have see this problem during the installation: Errors during downloading metadata for repository 'appstream': \- Curl error (60): Peer certificate cannot be authenticated with given CA certificates for https\://mirrors.rockylinux.org/mirrorlist?arch=x86\_64\&repo=AppStream-8 **\[SSL certificate problem: certificate is not yet valid]** **Please check the system clock and sync the clock time:** systemctl enable chronyd --now chronyc -a makestep ::: - To continue with the Tenant Connector Inbound installation, the user should select the second option by **entering 2 and pressing the Enter key.** ![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/VLoysJ1tYTdKC98VJ6Pfy_image.png "Selecting Install MT Cloud - Inbound") - The installation script asks the user to upload the** tunnel setup config file (tunnel\_setup.txt)**, which can be obtained in the process of adding an inbound connector node on the Web GUI, to the** /opt/pam/connector** directory on the connector machine. So, without closing the current installation, the user should open a new SSH session and upload the tunnel setup config to /opt/pam/connector directory, return to the first session, and press the **Enter** key. ![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/krl5IyfX5Gyq4eb1VRH6r_image.png "Uploading the tunnel setup config file") - Once the **Installation is completed, leaving …** message is seen on the screen, the installation is finalized. ![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/Hj4d_7JJ7lwbDhGAtCdpC_image.png "The end of the installation script")