Configure IQService to disable non-TLS port

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi! A May IQService update forces before/after operation rules to run only if IQService is configured only over TLS. If plain text port is up, IQS refuses to run scripts.

Following documentation, I tried to disable plain text port with these alternatives:

  1. iqservice.exe -p 0
  2. iqservice.exe -p -1
  3. remove plain text port from registry
  4. uninstall and remove iqservice, restart windows and install with iqservice.exe -i -b -p 0 -o 5051

For all of these, iqservice binds to plain text port:

For reinstall, I downloaded last iqs version. Any clue?

This is the output, whatever I do..

PS C:\IQService> .\IQService.exe -d -l 3
09/12/2025 16:37:40 : ServiceMain [ Thread-1 ] INFO : “Listening on TLS Port: [5051]”
09/12/2025 16:37:40 : ServiceMain [ Thread-1 ] INFO : “Connection Read Timeout: [15]”
09/12/2025 16:37:40 : ServiceMain [ Thread-1 ] INFO : “TraceLevel: [3]”
09/12/2025 16:37:40 : ServiceMain [ Thread-1 ] INFO : “TraceFile: [C:\IQService\IQTrace.log]”
09/12/2025 16:37:40 : ServiceMain [ Thread-1 ] INFO : “Running As: [LocalSystem]”
09/12/2025 16:37:40 : ServiceMain [ Thread-1 ] INFO : “CommandLine Arguments”
09/12/2025 16:37:40 : ServiceMain [ Thread-1 ] INFO : “Argument[0] ==>‘-d’”
09/12/2025 16:37:40 : ServiceMain [ Thread-1 ] INFO : “Argument[1] ==>‘-l’”
09/12/2025 16:37:40 : ServiceMain [ Thread-1 ] INFO : “Argument[2] ==>‘3’”
09/12/2025 16:37:40 : ServiceMain [ Thread-1 ] INFO : "ServiceName : IQService-Instance1
Display Name : SailPoint IQService-Instance1
Configured TLS Port : 5051
Connection Read Timeout : 15
Update Interval : 30
Build version : IQService-May-2025
Build timestamp : 05/07/2025 01:41 PM +0530
Build location : master
Build builder : jenkins
Build Number : 842
Executable : C:\IQService\IQService.exe
File Size : 80552
File Date : 9/9/2025 12:49:50 PM
Trace Level : 3 [ debug ]
UpdateService Status : NOT CONFIGURED
"
09/12/2025 16:37:40 : ServiceEntryPoints [ Thread-1 ] INFO : “Listening on TLS port 5051 and non-TLS port 5050”
09/12/2025 16:37:40 : RpcServer [ Thread-1 ] INFO : “TCP Listener createdSystem.Net.Sockets.TcpListener”
09/12/2025 16:37:40 : RpcServer [ Thread-1 ] INFO : “TLS TCP Listener createdSystem.Net.Sockets.TcpListener”
09/12/2025 16:37:40 : RpcServer [ Thread-1 ] INFO : “Listening Non - TLS thread created”
09/12/2025 16:37:40 : RpcServer [ Thread-1 ] INFO : “Listening TLS thread created”

2

Have you tried installing with only the TLS port? Omitting -p 0

IQService.exe -i -o <TLS Port Number>

3

Hi Edward, tried to install right now with only -o, but when starting service, non-TLS is listening on 5050.