Testing Connectivity to the CA Content Server (ACME) server for signature and content updates

Document ID : KB000027736
Last Modified Date : 14/02/2018
Show Technical Document Details


How do I test port connectivity to the CA Content Server (contentupdate.ca.com) for CA Client Automation and CA Patch Manager?



From versions 11.2 onwards, content download can be configured to use port 443 or 5250, so access needs to be verified for either port 5250 or 443 depending on your configuration.

If no Internet Proxy Server (IPS) is present, the port need to be opened between the Domain Manager (DM) and the content server directly.

If an Internet Proxy Server (IPS) is present, the DM would communicate with the IPS via the standard internet port (80 / 8080 typically).



The following is valid for proxy and non-proxy testing equally. To test that the ports are open correctly, click on the following links.

Port 5250:


Port 443:



If the port is open, you will get the following result:


Internet Explorer


Google Chrome


Note: CA Patch Manager also needs Internet access to third-party Websites in order to download the required patches. Ex: http://download.microsoft.com/