Return
-
Title
SPP Virtual Appliance OS Activation Firewall Requirement -
Description
When activating Windows OS for SPP, error: "ServiceClientException: Call timed out: POST https:/localhost:9443/iservice/watchdog/v4/LicenseAndActivation/TryLicense"
-
Cause
Microsoft have their own Load balancing for their activation servers. Allowing only 80/443 for SPP is not enough
-
Resolution
On top of the standard 80/443, there's a need to allow all microsoft links as it redirects to other links as the following.
- https://go.microsoft.com/
- http://go.microsoft.com/
- https://login.live.com
- https://activation.sls.microsoft.com/
- http://crl.microsoft.com/pki/crl/products/MicProSecSerCA_2007-12-04.crl
- https://validation.sls.microsoft.com/
- https://activation-v2.sls.microsoft.com/
- https://validation-v2.sls.microsoft.com/
- https://displaycatalog.mp.microsoft.com/
- https://licensing.mp.microsoft.com/
- https://purchase.mp.microsoft.com/
- https://displaycatalog.md.mp.microsoft.com/
- https://licensing.md.mp.microsoft.com/
- https://purchase.md.mp.microsoft.com/
It is recommended to whitelist all the Microsoft links are open so it can redirect between microsoft.com links