The port 5986 is used for PowerShell Remoting over HTTPS, which is a secure way of executing PowerShell commands on a remote Windows VM. Calm uses PowerShell Remoting to run scripts on Windows VMs as part of the blueprint actions. Therefore, the port 5986 needs to be opened on the VM firewall to allow the communication between Calm and the VM. The other ports are not related to PowerShell Remoting, as they are used for SQL Server (1433), Remote Desktop Protocol (3389), and PowerShell Remoting over HTTP (5985). References: Nutanix Certified Professional - Multicloud Automation (NCP-MCA) 6.5 Exam Blueprint Guide, page 10; Nutanix Certified Professional - Multicloud Automation (NCP-MCA), section 3; Nutanix Calm User Guide, page 93.