The Timestamping Authority solution adds the following port requirements.

Incoming traffic to Timestamping Authority

In all the installation nodes, check that the following ports are accessible for incoming traffic to PKI Hub.

Source

Protocol

Target Service

Target Port

Timestamp client

TCP/HTTP

Timestamp responder

80

Outgoing traffic from Timestamping Authority

In all the installation nodes, check that the following ports are accessible for outgoing traffic from PKI Hub.

Source

Protocol

 Target service

Target port

TSA

NTLS

Luna Network HSM (if any)

1792

TSA

TCP/HTTPS

nShield HSM (if any)

9000-9004