Why must port 445 be opened in SQL during installation or rollup upgrades

(0) Share

Report

Posted on by anifarap

Why must port 445 be opened in SQL during installation or rollup upgrades? Is there a specific reason why it should be opened only during installation as it is related to the Database? Normally this port is used by SMB and "shared folders" thus making it prone to attacks.

I have the same question (0)

All responses (5)

Answers (1)

Sort by

Suggested answer

SS-01100907-0 Microsoft Employee on at

Like (1)

Report
Copy link

Link copied!

Hi,

Yes, Port 445 (Microsot-DS) should be open between the SQL and CRM Servers for Actve Directory Access and Authentication.

As you can see the default connectivity requirements for an on-premises deployment below, Port 445 is mandatory for Server to Server (CRM, SQL, SSRS) communications.

https://docs.microsoft.com/en-us/previous-versions/dynamicscrm-2013/white-papers/dn683916(v=crm.6)?redirectedfrom=MSDN

Thanks,

Soumen

Was this reply helpful? Yes No
anifarap 66 on at

Like (0)

Report
Copy link

Link copied!

thanks for the reply. Would you be able to help to elaborate more on Active Directory Access and Authentication to Database? I understand this port is not required during normal operation of CRM and this port is only used during installation, New Organization, Import and Rollup Upgrades. I would just like to understand why is it such as the description "Active Directory Access and Authentication" does not give much detail into it. Thanks!

Was this reply helpful? Yes No
Verified answer

Wahaj Rashid 11,323 on at

Like (1)

Report
Copy link

Link copied!

Hi,

As you said, 445 is used for SMB and for D365 installation Microsoft uses it to copy template database file on SQL Server using a UNC path.

An extract from docs:

"Active Directory service required for Active Directory access and authentication. This is used by Server Message Block (SMB) during organization creation to create a 'template database' from the installation location on the Dynamics 365 Server to a UNC path on the SQL server."

I hope this answers your question.

Best,

Wahaj

(if it helps, mark it verified)

Was this reply helpful? Yes No
anifarap 66 on at

Like (1)

Report
Copy link

Link copied!

Thanks, so it means that during installation CRM is actually using the SMB to copy over the "template database" to the SQL Server. I did check the CRM installation folder and it does have an mdf file inside some sql folder called msxrm9.mdf. This may be the "template database" which is being described.

Was this reply helpful? Yes No
Wahaj Rashid 11,323 on at

Like (0)

Report
Copy link

Link copied!

It is my pleasure :)

Was this reply helpful? Yes No