# Configure IQService to disable non-TLS port

**URL:** <https://developer.sailpoint.com/discuss/t/configure-iqservice-to-disable-non-tls-port/179044>\
**Category:** SHF Discussion and Questions\
**Tags:** connectors, identity-security-cloud\
**Created:** [September 12, 2025, 7:34pm UTC](https://developer.sailpoint.com/discuss/t/configure-iqservice-to-disable-non-tls-port/179044 "2025-09-12T19:34:53Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![jsosa](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jsosa/32/31578_2.png) [@jsosa](https://developer.sailpoint.com/discuss/u/jsosa)\
**Post date:** [September 12, 2025, 7:34pm UTC](https://developer.sailpoint.com/discuss/t/configure-iqservice-to-disable-non-tls-port/179044/1 "2025-09-12T19:34:53Z")

</div>

Hi! A May IQService update forces before/after operation rules to run only if IQService is configured only over TLS. If plain text port is up, IQS refuses to run scripts.

Following documentation, I tried to disable plain text port with these alternatives:

1. iqservice.exe -p 0
2. iqservice.exe -p -1
3. remove plain text port from registry
4. uninstall and remove iqservice, restart windows and install with iqservice.exe -i -b -p 0 -o 5051

For all of these, iqservice binds to plain text port:

For reinstall, I downloaded last iqs version. Any clue?

This is the output, whatever I do..

PS C:\IQService\> .\IQService.exe -d -l 3  
09/12/2025 16:37:40 : ServiceMain [Thread-1] INFO : “Listening on TLS Port: [5051]”  
09/12/2025 16:37:40 : ServiceMain [Thread-1] INFO : “Connection Read Timeout: [15]”  
09/12/2025 16:37:40 : ServiceMain [Thread-1] INFO : “TraceLevel: [3]”  
09/12/2025 16:37:40 : ServiceMain [Thread-1] INFO : “TraceFile: [C:\IQService\IQTrace.log]”  
09/12/2025 16:37:40 : ServiceMain [Thread-1] INFO : “Running As: [LocalSystem]”  
09/12/2025 16:37:40 : ServiceMain [Thread-1] INFO : “CommandLine Arguments”  
09/12/2025 16:37:40 : ServiceMain [Thread-1] INFO : “Argument[0] ==\>‘-d’”  
09/12/2025 16:37:40 : ServiceMain [Thread-1] INFO : “Argument[1] ==\>‘-l’”  
09/12/2025 16:37:40 : ServiceMain [Thread-1] INFO : “Argument[2] ==\>‘3’”  
09/12/2025 16:37:40 : ServiceMain [Thread-1] INFO : "ServiceName : IQService-Instance1  
Display Name : SailPoint IQService-Instance1  
Configured TLS Port : 5051  
Connection Read Timeout : 15  
Update Interval : 30  
Build version : IQService-May-2025  
Build timestamp : 05/07/2025 01:41 PM +0530  
Build location : master  
Build builder : jenkins  
Build Number : 842  
Executable : C:\IQService\IQService.exe  
File Size : 80552  
File Date : 9/9/2025 12:49:50 PM  
Trace Level : 3 [debug]  
UpdateService Status : NOT CONFIGURED  
"  
09/12/2025 16:37:40 : ServiceEntryPoints [Thread-1] INFO : “Listening on TLS port 5051 and non-TLS port 5050”  
09/12/2025 16:37:40 : RpcServer [Thread-1] INFO : “TCP Listener createdSystem.Net.Sockets.TcpListener”  
09/12/2025 16:37:40 : RpcServer [Thread-1] INFO : “TLS TCP Listener createdSystem.Net.Sockets.TcpListener”  
09/12/2025 16:37:40 : RpcServer [Thread-1] INFO : “Listening Non - TLS thread created”  
09/12/2025 16:37:40 : RpcServer [Thread-1] INFO : “Listening TLS thread created”

---

<div class="post-metadata">

**Author:** ![ethompson](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/ethompson/32/17298_2.png) [@ethompson](https://developer.sailpoint.com/discuss/u/ethompson)\
**Post date:** [September 12, 2025, 8:52pm UTC](https://developer.sailpoint.com/discuss/t/configure-iqservice-to-disable-non-tls-port/179044/2 "2025-09-12T20:52:10Z")

</div>

Have you tried installing with only the TLS port? Omitting `-p 0`

`IQService.exe -i -o <TLS Port Number>`

---

<div class="post-metadata">

**Author:** ![jsosa](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jsosa/32/31578_2.png) [@jsosa](https://developer.sailpoint.com/discuss/u/jsosa)\
**Post date:** [September 22, 2025, 5:57pm UTC](https://developer.sailpoint.com/discuss/t/configure-iqservice-to-disable-non-tls-port/179044/3 "2025-09-22T17:57:14Z")

</div>

Hi Edward, tried to install right now with only -o, but when starting service, non-TLS is listening on 5050.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [November 21, 2025, 5:57pm UTC](https://developer.sailpoint.com/discuss/t/configure-iqservice-to-disable-non-tls-port/179044/4 "2025-11-21T17:57:54Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.