Use the following psadmin cli command to provision a Secure Remote Access instance:
psadmin provision-sra -u amadmin -f /tmp/passwd -p portal1 --gateway-profile default --enable