Before You Begin
You'll need:
Team Admin permissions in Sine
A Windows computer with network access to your access control system
Outbound connections allowed from your Windows computer to Sine IPs
Create a tunnel
First, you'll need to to create a tunnel. You can find your tunnel settings by navigating to the admin dashboard in the app switcher. From here, navigate to Settings > Advanced settings and you will find the bridge manager.
In the bridge manager section, click create tunnel to open the tunnel creation modal.
From inside the create tunnel modal, you will need to fill in the tunnel details:
Name: Choose something descriptive (e.g., "HQ Access Control")
Service URL: Enter the URL of your access control system (e.g., http://192.168.1.100:8080)
Click create tunnel once you've filled in both fields, and ensure you copy the command generated. You will need this to install your bridge agent.
⚠️ Important: After creation, you'll see a command containing a secure token. Copy this command immediately - it can only be viewed once.
Install the Bridge Agent
On your Windows computer, open Command Prompt as Administrator. Paste and run the command you copied in Step 1 when creating your tunnel.
Screenshot showing how to run Command Prompt as Administrator
The command will:
Install the Sine Cloud Connector agent
Install the Sine Secure Bridge Auto-updater
When an update is available, the updater will automatically download the new service and run it, no manual steps or additional setup is required.
Both will install as Windows services
Sine Cloud Connector agent will be configured using your secure token
Please note, one agent can only be associated with one connection.
Verify the Connection
Return to advanced settings in the admin dashboard. Your tunnel should show as "Connected" with a green indicator.
Understanding Connection States
Your tunnel will show one of these states:
Connected (Green)
Your tunnel is currently active and functioning properly
Disconnected (Red)
Your tunnel has lost its connection and is not currently operation.
Inactive (Yellow)
Your tunnel is experiencing a brief connection interruption. The system is attempting to resolve the connection automatically.
Setup required (Grey)
Your tunnel has not been initialized. Complete the agent setup process to establish a connection.
The agent will automatically attempt to reconnect if the connection is lost.
Rotating and Revoking tokens
Auth tokens keep your Sine Secure Bridge tunnel connected and authenticated. Within each tunnel's configuration, you are able to rotate or revoke these tokens.
Rotate a token when you want to replace it without disrupting the connection (ie. no down time), this is common routine security hygiene. Steps below:
Click manage on the relevant tunnel
Click rotate in the token row
Your token has been rotated and tunnel status will remain connected
Revoke a token when you want to permanently disconnect a tunnel, for example if you believe your token has been compromised. Revoking a token will disrupt any connected services.
Click manage on the relevant tunnel
Click revoke in the token row
Provide a reason for revoking
The token has been revoked and tunnel status will after a few minutes become disconnected
If you would like to reuse the same tunnel that you have just revoked the token for, you can click rotate token which will generate a new token and command for you to run. See Install the Bridge Agent steps above.
Troubleshooting
If your tunnel isn't connecting:
Check the agent service is running:
Open Windows Services
Find "Sine Cloud Connector"
Verify it shows as "Running"
Verify network connectivity:
Ensure the machine can reach both Sine and your access control system
Validate the service URL:
Confirm you can access the access control system URL from the machine
Ensure the URL includes the correct protocol, i.e (http/https)
Check the agent logs
Located in the installation directory
Look for any error messages or connections issues
Note, health checks occur every 15 seconds to monitor connection status.
Sine Secure Bridge Auto-updater
If you didn't download the auto-updater initially, you can run the command below in a terminal window.
sine-secure-bridge-updater service install
If you would like to un-install the auto updater, simply paste this command below and run in a terminal window.
sine-secure-bridge-updater service uninstall
Best Practices & Security
Install the agent on the same machine as your access control system when possible
All communication is encrypted
The tunnel only allows outbound connections to Sine
Keep your authentication tokens secure
Need Help?
Contact Sine Support and include:
Your tunnel ID
Any error messages from the agent logs
Steps you've already tried