Provisioning Server Ports


Article ID: 131832


Updated On:


CA Identity Manager CA Identity Governance CA Identity Portal


During an upgrade of the Provisioning Server components from Identity Manager 12.6.8 to version 14.2 an issue was encountered using the default port 20394. Using port 20391 allowed the upgrade to complete but why are there different provisioning server ports?


Identity Manager 14.2


Normally for routing and load balancing purposes the Provisioning Server communicates through the Identity Manager Provisioning Server DSA Router and not directly to with the Provisioning Directory itself, however In the context of an upgrade the port number does not make a difference to the outcome.

Port 20394 communicates directly with the Provisioning Directory (IMPD).
Port 20391 communicates via the Provisioning Server (IMPS) router.

If port 20391 is working it means the Identity Provisioning Server (IMPS) router is installed on the server in which the Provisioning Server (PS) is upgrading and IMPS router has the knowledge of Provisioning Directory (IMPD).

If port 20394 is not working in the same server means it does not have knowledge of the IMPD.

Additional Information

Understanding which port to use during the upgrade may require further investigation by CA Support.

Some common diagnostic questions:

If port 20394 is not working, where is the IMPD is installed? 
Is the IMPD installed on the same server? if not identify\change the host name and retry.
Are the server name(s) and credentials correct.

If pursuing the cause of this issue with support it is recommended customers provide full details of how many server(boxes) are deployed and where the IMPS and IMPD components are installed along with server names.