# Port opening for IQService

**URL:** <https://developer.sailpoint.com/discuss/t/port-opening-for-iqservice/211634>\
**Category:** IIQ Discussion and Questions\
**Tags:** workflows, iqservice, active-directory, identityiq, apis\
**Created:** [June 4, 2026, 7:13am UTC](https://developer.sailpoint.com/discuss/t/port-opening-for-iqservice/211634 "2026-06-04T07:13:38Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![rishavghoshacc](https://avatars.discourse-cdn.com/v4/letter/r/dc4da7/32.png) [@rishavghoshacc](https://developer.sailpoint.com/discuss/u/rishavghoshacc)\
**Post date:** [June 4, 2026, 7:13am UTC](https://developer.sailpoint.com/discuss/t/port-opening-for-iqservice/211634/1 "2026-06-04T07:13:38Z")

</div>

Hi all,

I am trying to migrate IQService from one server to another.

I have ran the below command on the new server to start listening on port 5050

```powershell
$listener = [System.Net.Sockets.TcpListener]5050
$listener.Start()

```

The below command shows that the server is listening on port 5050

```powershell
Get-NetTCPConnection -State Listen

```

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/7/6/76b8c43f2ea869f7cea646ae923b73c6c1d7a5e6.png)

Is this enough to open the port 5050 or is there a proper way to open a certain port on a server(Windows)

Thanks in advance

---

<div class="post-metadata">

**Author:** ![naveenkumar3](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/naveenkumar3/32/39339_2.png) [@naveenkumar3](https://developer.sailpoint.com/discuss/u/naveenkumar3)\
**Post date:** [June 4, 2026, 8:12am UTC](https://developer.sailpoint.com/discuss/t/port-opening-for-iqservice/211634/2 "2026-06-04T08:12:54Z")

</div>

> [@rishavghoshacc](#):
>
> Is this enough to open the port 5050 or is there a proper way to open a certain port on a server(Windows)

That is **not enough**. What you’ve done is just created a **temporary TCP listener using PowerShell** — it is not a real service, it will disappear as soon as the session closes, and it has nothing to do with IQService.

* * *

#### The proper way to migrate IQService:

**1. Install IQService on the new server** Run the IQService installer (provided with SailPoint IIQ) on the new Windows server. This installs it as a proper **Windows Service**.

**2. Configure IQService** Update the `IQService` config file with the correct port (5050) and any other required settings like the IIQ server details.

**3. Start the IQService Windows Service** Start it via `services.msc` or PowerShell — this is what actually listens on port 5050 legitimately.

**4. Open Port 5050 on Windows Firewall** Even after IQService is running, you need to explicitly allow inbound traffic on port 5050 via **Windows Defender Firewall** — create an inbound rule for TCP port 5050.

**5. Update IIQ Application Configuration** In SailPoint IIQ, update the **Active Directory application connector settings** to point to the new server’s hostname/IP and port 5050.

---

<div class="post-metadata">

**Author:** ![rishavghoshacc](https://avatars.discourse-cdn.com/v4/letter/r/dc4da7/32.png) [@rishavghoshacc](https://developer.sailpoint.com/discuss/u/rishavghoshacc)\
**Post date:** [June 4, 2026, 8:41am UTC](https://developer.sailpoint.com/discuss/t/port-opening-for-iqservice/211634/3 "2026-06-04T08:41:53Z")

</div>

@naveenkumar3 Thanks

Is the IQService needed to be uninstalled from the old server before proceeding to install it on the new server?

---

<div class="post-metadata">

**Author:** ![naveenkumar3](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/naveenkumar3/32/39339_2.png) [@naveenkumar3](https://developer.sailpoint.com/discuss/u/naveenkumar3)\
**Post date:** [June 4, 2026, 9:16am UTC](https://developer.sailpoint.com/discuss/t/port-opening-for-iqservice/211634/4 "2026-06-04T09:16:50Z")

</div>

> [@rishavghoshacc](#):
>
> Is the IQService needed to be uninstalled from the old server before proceeding to install it on the new server?

**No** , you do not need to uninstall IQService from the old server before installing it on the new one.

The recommended approach is actually:

1. **Install and configure IQService on the new server first**
2. **Test connectivity** — ensure IIQ can communicate with the new server on port 5050
3. **Update the IIQ application connector** to point to the new server
4. **Verify everything works** end to end
5. **Then decommission/uninstall** IQService from the old server

---

<div class="post-metadata">

**Author:** ![kumarSinghM](https://avatars.discourse-cdn.com/v4/letter/k/ecb155/32.png) [@kumarSinghM](https://developer.sailpoint.com/discuss/u/kumarSinghM)\
**Post date:** [June 4, 2026, 6:02pm UTC](https://developer.sailpoint.com/discuss/t/port-opening-for-iqservice/211634/5 "2026-06-04T18:02:02Z")

</div>

Hi @rishavghoshacc

If I understand it correct, you are trying to enable the port 5050 to be accessible outside the Windows Server?

Please confirm if this is what you need, I can guide you with the steps.

---

<div class="post-metadata">

**Author:** ![kumarSinghM](https://avatars.discourse-cdn.com/v4/letter/k/ecb155/32.png) [@kumarSinghM](https://developer.sailpoint.com/discuss/u/kumarSinghM)\
**Post date:** [June 4, 2026, 6:03pm UTC](https://developer.sailpoint.com/discuss/t/port-opening-for-iqservice/211634/6 "2026-06-04T18:03:44Z")

</div>

It can be done through this:

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/9/4/942f63c3ad17482699c6b8def562a31d78a23abf.png)

Create a inbound rule for Port 5050.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [August 3, 2026, 6:04pm UTC](https://developer.sailpoint.com/discuss/t/port-opening-for-iqservice/211634/7 "2026-08-03T18:04:41Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
