License Server Firewall Requirements

QPM server requires access to the following URLs.

  1. https://apigwx-aws.qualcomm.com on port 443 REQUIRED
    Typical symptom of the failure: login failure

  2. https://d1fmewm8udj8en.cloudfront.net on port 443 REQUIRED
    Required if faster download speed is desired.

  3. https://qpm.chinacloudfront.qualcomm.com on port 443 OPTIONAL
    Required only if faster download speed for users based in China.

  4. https://dvbe2v39djgxg.cloudfront.net/ on port 443 OPTIONAL
    Required for qpm3-cli to download full builds.

  5. https://d1k9x1hli7v4r5.cloudfront.net/ on port 443 OPTIONAL
    Required for qpm3-cli to download diff builds.

  6. Check DSN and Firewall issues using the following commands to execute and the expected output:

    Command to execute : nslookup apigwx-aws.qualcomm.com

    • Sample Output:
      Name: d2uf15avqx5eaz.cloudfront.net
      Addresses: x.x.x.x
      x.x.x.x
      Aliases: apigwx-aws.qualcomm.com
      apigwx-aws.gtpgeo.com

    Command to execute : curl -v https://apigwx-aws.qualcomm.com

    • Sample Output:
      Rebuilt URL to: https://apigwx-aws.qualcomm.com/
      timeout on name lookup is not supported
      Trying x.x.x.x...
      TCP_NODELAY set
      Connected to apigwx-aws.qualcomm.com (x.x.x.x) port 443 (#0)
      schannel: SSL/TLS connection with apigwx-aws.qualcomm.com port 443 (step 1/3)
      schannel: checking server certificate revocation
      ...
      schannel: SSL/TLS handshake complete
      schannel: SSL/TLS connection with apigwx-aws.qualcomm.com port 443 (step 3/3)
      schannel: stored credential handle in session cache
      GET / HTTP/1.1
      Connection #0 to host apigwx-aws.qualcomm.com left intact