Registration and Provisioning

Step-by-step walkthrough of creating your ISP account, claiming your custom subdomain, and provisioning your first MikroTik router.

Register an ISP workspace

Creating a new Nukta workspace initializes both your administrator account and your ISP's multi-tenant tenant environment. The registration process is designed to be completed in minutes through an automated onboarding wizard that verifies your credentials, reserves your unique subdomain, and provides your router setup script.

Registration input requirements

Before beginning the signup wizard, review the required inputs:

Input Field	Requirement	Purpose & Guidelines
Full Name	Required	The account owner's real first and last name.
Email Address	Required, unique	Used for account recovery, notifications, and administrator sign-in.
Password	Required, min 8 characters	Must contain uppercase, lowercase, numbers, and special characters.
Mobile Phone	Required	Verified via instant 6-digit SMS OTP to protect against spam accounts.
ISP / Company Name	Required	The business identity displayed to your customers across portals and receipts.
Subdomain Handle	Required, unique	The prefix for your dashboard and customer captive portal (e.g., `mtaaninet.nukta.one`).
Country & Timezone	Required	Anchors transaction timestamps, customer expiry schedules, and daily reporting (e.g., `Africa/Nairobi`).
Billing Currency	Required	Standard 3-letter currency code for your operating market (e.g., `KES`, `USD`, `NGN`).

The onboarding wizard walkthrough

1. Account creation and email verification

Start at nukta.one/signup:

Enter your full name, email address, and strong password.
If you arrived via an ISP referral link, your referral code will populate automatically.
Submit the form. Nukta creates your ISP account and sends an email verification link to your inbox.
Open the email from Nukta and click the confirmation link to activate your email address.

2. Mobile phone verification (SMS OTP)

To ensure reliable SMS delivery and protect network resources:

Enter your mobile phone number in international format (e.g., +254 712 345 678).
Nukta dispatches a 6-digit verification code via SMS.
Enter the code. Verification codes are valid for 3 minutes. If delayed by carrier congestion, a 60-second cooldown timer protects against redundant requests.

3. Regional settings

Confirm your operating region:

Country: Select your primary operating country.
Timezone: Set your operating timezone. All customer expiration times, scheduled billing cycles, and daily reports operate in this timezone.
Currency: Select your 3-letter operating currency code.

4. ISP identity and custom subdomain

Choose the digital identity for your ISP:

ISP Name: Enter your brand name (e.g., Mtaani Wireless Solutions).
Subdomain Handle: Choose a unique slug using letters, numbers, and hyphens (e.g., mtaani). The wizard checks availability in real time against the platform registry. Once claimed, your dedicated dashboard URL becomes:
```
https://mtaani.nukta.one
```
Brand Theme Color: Pick an accent color from our curated palette (such as Indigo, Emerald, Blue, Violet, or Amber). This color will be applied across your administrative dashboard, captive hotspot pages, and customer self-service portals.

5. Zero-touch MikroTik router provisioning

During onboarding (or at any time later in Devices → Mikrotiks), you can connect your first physical or virtual MikroTik router:

Enter Router Identity: Name the router (e.g., Site 1 Gateway).

Generate Provisioning Script: Nukta generates a secure, one-time terminal command containing an encrypted provisioning token:

/tool fetch url="https://mtaani.nukta.one/provisioning/eyJwaWQiOiJ..." dst-path=nukta-setup.rsc; /import nukta-setup.rsc; /file remove nukta-setup.rsc;

Run in MikroTik Terminal: Connect to your router via WinBox, WebFig, or SSH. Open New Terminal, paste the command, and press Enter.
Automatic Detection: The router downloads the configuration file, executes it in seconds, and automatically establishes a WireGuard handshake with Nukta's cloud infrastructure. The onboarding screen will display a green checkmark as soon as the router checks in.

6. Workspace launch

Once verified, the wizard finishes initializing your tenant records and automatically redirects your browser to your live dashboard at https://{subdomain}.nukta.one.

How the router provisioning script works

When you run the provisioning command on your MikroTik router, it securely performs the following tasks automatically:

WireGuard VPN Interface: Creates a dedicated nukta-wg interface and assigns a unique private IP address within Nukta's isolated management network (e.g., 10.10.x.x).
Encrypted Tunnel Handshake: Configures Nukta's central WireGuard gateway as an active peer with persistent keepalives (25 seconds) to traverse NAT and firewalls without requiring a public IP on your router.
RADIUS Client Configuration: Points your router's AAA authentication, authorization, and accounting engine directly to Nukta's high-speed cloud RADIUS servers for both Hotspot and PPPoE services.
Walled Garden Entries: Adds necessary firewall rules allowing unauthenticated hotspot visitors to access your online payment gateways, captive portal assets, and domain endpoints before buying a package.
Auto-Cleanup: Deletes the downloaded .rsc configuration file from your router's storage once import finishes, ensuring no sensitive secrets remain on disk.

Common registration & provisioning issues

Email verification link not received

Check your spam, junk, or promotions folders.
Confirm that your email address was typed correctly without spelling errors.
Return to the signup page to resend the verification email after 60 seconds.

Phone OTP code expired or rejected

Codes are valid for 3 minutes. If you requested multiple codes, only enter the most recent one received.
Ensure you entered your full phone number including your country code (e.g., +254 or your country's international dial code).

Subdomain handle unavailable

Subdomain handles must be globally unique across all Nukta ISPs.
Reserved system words (such as admin, api, dashboard, mail, portal, billing) cannot be claimed.
If your preferred name is taken, add a regional or service suffix (e.g., mtaani-net or mtaani-wifi).

Router fails to come online after running the script

If the provisioning script runs in the MikroTik terminal but the router does not show "Online" in your dashboard:

Check Internet Reachability: Verify your router has an active internet connection by running /ping 8.8.8.8 in the MikroTik terminal.
Check DNS Resolution: Run /put [:resolve nukta.one] in the terminal. If it fails, configure public DNS servers under /ip dns set servers=8.8.8.8,1.1.1.1.
Check RouterOS Version: Nukta requires RouterOS v7 (v7.12 or newer recommended). RouterOS v6 does not include native WireGuard support and cannot establish the management tunnel.
System Clock / NTP: If your router clock is set to 1970, SSL certificates and WireGuard handshakes will fail. Enable SNTP under /system ntp client and set your local timezone under /system clock.
Inspect WireGuard Status: Run /interface/wireguard/print and /interface/wireguard/peers/print to verify the tunnel is active and transferring bytes.