In addition to the ports listed in Required open ports, ensure no network restriction blocks access to port 1443.

Certificate Enrollment Gateway deployment automatically opens this port in the firewall of the machines hosting Entrust PKI Hub.