To execute a PowerShell script from ISC workflow against a windows server, we need 5986 port to be opened or in other words you have to configure a WinRM HTTPS listener with a valid certificate on the target Windows server.
I only found it by trail and error. It is not documented.