--- title: Remote Access Configuration in Kron PAM slug: kronpam-reference-guide-3-6-0/remote-access-configuration-in-kron-pam description: Learn how to configure remote access in Kron PAM for vendors with this comprehensive document. Follow step-by-step instructions on adding the cloud server name, enabling access from the cloud server, and editing the Tomcat CORS file. Additionally, discove docTags: createdAt: 2023-09-26T11:25:57.689Z --- Remote Access Configuration is the page where administrators can set the working hours of vendors in Kron PAM. Before making configurations, you need to add the cloud server name and allow access from the cloud server to Kron PAM. Add the cloud server name for the link attached to the email: 1. Navigate to **Administration > System Config Man** 2. Set the following parameter as the **Remote Access Portal** (cloud server) address and **Save**: | **Parameter Name** | **Default Parameter Value** | **Description** | | -------------------- | -------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | | **rap.cloud.server** | [http://localhost:7777/connect](http://localhost:7777/connect) | This parameter defines the Remote Access Portal address. The parameter can be defined as URL with IP (e.g., [https://34.234.69.53/connect](https://34.234.69.53/connect)) or as URL with domain name (e.g., [https://cloudpam.com/connect](https://cloudpam.com/connect)) | There are also optional parameters that can be defined to tune Remote Access Configuration up. | **Parameter Name** | **Default Parameter Value** | **Description** | | ----------------------------------------------------- | ---------------------------------- | ------------------------------------------------------------------------------------------------------------------------- | | **rap.rdp.session.duration.limit.warning.before.min** | [1](http://localhost:7777/connect) | This parameter defines how many minutes before the RDP session expires that the timeout warning will be sent. | | **rap.ssh.session.duration.limit.warning.before.min** | [1](http://localhost:7777/connect) | This parameter defines how many minutes before the SSH session expires that the timeout warning will be sent. | | **rap.token.expiration.period** | 1 | This parameter indicates the lifespan of a token
and is used to prevent the creation of long-term invitation links. | Then allow access from the cloud server to Kron PAM. 1. Edit the Tomcat CORS file with the cloud URL in the web.xml file. - Open the web.xml. vi /pam/gui/conf/web.xml - Fill in the CORS allowed origins field. - Example; \cors.allowed.origins\ - \https\://remote.cloudpam.com</param-value> - The \* wildcard allows all access, but this usage is not recommended for product environments. The Remote Access invitations can be created by clicking the +**Add **button. ::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/pzC_kuhXf1G-vSa1c23va_image.png" size="72" width="984" height="435" position="center" caption="Remote Access Configuration Page" showCaption="true"} After creating the invitation for the vendor, you can edit and delete the request by clicking the options button to the right of the request. ![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/ECODO7pjtT1AgcqkUfBYF_image.png "Edit or Delete Request") Admins can verify the details of the request by clicking on the request. ![](https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/WQMqbDfO6XixTVev97szB_image.png "Details of the request") To invite a vendor: 1. Navigate to **Users > Remote Access Configuratio**n 2. Click the **Add.** 3. Fill in the username/group and device/group and click **NEXT**. ::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/NVy6XFYWjThYbfcS0accr_image.png" size="70" width="556" height="332" position="center" caption="Select Username/Group and Device/Group" showCaption="true"} - Fill in the start and end times and select the days. ::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/UoYLrCdAIcN82yYs-z3Lf_image.png" size="68" width="444" height="381" position="center" showCaption="false"} Administrators can also set specific working hours for vendors by enabling Set Time By Day. ::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/019ogPWvxBQ43CMdjqKXY_image.png" size="68" width="439" height="526" position="center" showCaption="false"} - Click the **Save** button. Vendors receive an email with a URL and a passcode. When the working time starts, vendors can click on the URL, enter their password first, enter the Kron PAM user password and start working. ::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/qk_ZGQbdSQyIjjPtFm_Re_image.png" size="84" width="556" height="310" position="center" caption="Mail Example for invitation" showCaption="true"} If the user hasn’t required realm rights, the warning pops up and says “The realm right is not sufficient for the selected user(s) or user group(s)”.