While Venafi documentation for each individual installation driver includes the port requirements, there was no single table view of the installation options and what port(s) are needed for that installation driver to work. Ended up putting together a table for our firewall rule discussion.
| Installation Type | Description | Default Port | Notes |
| Adaptable Installation Driver | Powershell | 22, 5985, 5986 | This is running a custom script |
| Amazon Web Services | 443 | To internet destination | |
| Apache HTTP | Uses ssh | 22 | |
| Azure Key Vault | 443 | To internet destination | |
| Citrix NetScaler | NITRO API | 443 | |
| F5 BigIP | iControl REST API | 443 | |
| Google Cloud Load Balancer | 443 | To internet destination | |
| IBM DataPower | DataPower Gateway | 5550, 5554 | |
| IBM Keystore | |||
| JKS | Uses ssh | 22 | Tomcat, Jboss, WebLogic |
| Oracle iPlanet Web Server | Uses ssh | 22 | |
| PEM | Uses ssh | 22 | |
| PKCS#12 | Uses ssh | 22 | |
| Windows CAPI & IIS | Uses WinRM | 5985, 5986 | |