KB: Altium 365 and Altium Designer Network Requirements
A365
概略
Solution Details
Important: For an overview of network requirements across Altium products and links to detailed deployment-specific guidance, see KB: Network Requirements for Altium Products.
Authentication, Licensing, Workspace and Core Services
These endpoints are required for Altium Designer to sign in, validate or manage licenses, connect to Altium 365 workspaces, and perform basic cloud operations.
| Destination Host | Protocol | Port | Purpose | Used By |
auth.altium.com | TCP | 443 | Altium account authentication, OAuth sign-in, token refresh | AD Client |
actionwait.altium.com | TCP | 443 | OAuth authorization code flow relay for desktop clients that cannot open a listening port More detials Desktop apps - Altium 365 Authentication | AD Installer + AD Client |
my.altium.com | TCP | 443 | Account management, in-app account and web views | AD Client |
portal365.altium.com | TCP | 443 | Altium 365 license authentication and management | AD Client |
store.altium.com | TCP | 443 | Subscription-related operations: allowed operations queries, subscription information. Note: license release/roam operations are handled by portal365.altium.com. | AD Client |
ids.api.altium.com | TCP | 443 | Cloud identity service used by workspace and MPS authentication | AD Client |
*.365.altium.com | TCP | 443 | Altium 365 workspace connectivity, tenant workspaces, vault APIs, service discovery, WebSockets, notifications, project and component services | AD Client |
use.365.altium.comusw.365.altium.comeur.365.altium.comasp.365.altium.com | TCP | 443 | Altium 365 regional services for US East, US West, EU and Asia workspaces | AD Client |
adworkspaces-uw.altium.comadworkspaces-ue.altium.comadworkspaces-eu.altium.comadworkspaces-as.altium.com | TCP | 443 | Region-specific workspace service endpoints for US West, US East, EU, and Asia workspace discovery and operations. | AD Client |
workspaces.altium.com | TCP | 443 | Workspace discovery and workspace listing | AD Client |
vault.api.altium.com | TCP | 443 | Vault and workspace API access | AD Client |
sharingservice.api.altium.com | TCP | 443 | Project sharing service — required for opening projects shared with the user ("Shared with Me") | AD Client |
www.altium.com | TCP | 443 | Product home page, documentation links, product information and update-related web views | AD Client |
dams.altium.com | TCP | 443 | Digital asset management services | AD Client |
Version Control / Git endpoints
These endpoints are covered by the *.365.altium.com wildcard, but are listed separately because they carry project version-control traffic.
| Endpoint | Region | Typical traffic |
| afs-vcs-ue1.365.altium.com | US East | Git pack downloads/uploads |
| afs-vcs-uw1.365.altium.com | US West | Git pack downloads/uploads |
| afs-vcs-eu1.365.altium.com | EU | Git pack downloads/uploads |
| afs-vcs-as1.365.altium.com | Asia | Git pack downloads/uploads |
Manufacturer Part Search (MPS) / Supplier & Part Searches
These endpoints are required for part search, part choices, and supplier data — both on the client (AD) and server (AES) side
| Destination Host | Protocol | Port | Purpose | Used By |
| api3.ciiva.com | TCP | 443 | Primary part search API (current) | AD Client + AES Server |
| api.nexar.com | TCP | 443 | Nexar GraphQL API for supply-chain and component intelligence data | AD Client |
| sigma.octopart.com | TCP | 443 | Octopart part search analytics | AD Client |
| datasheet.octopart.com | TCP | 443 | Component datasheets | AD Client |
| octopart.com | TCP | 443 | Component details view (optional but recommended) | AD Client |
| stat.api.altium.com | TCP | 443 | Usage statistics/telemetry | AD Client |
Static IPs for api3.ciiva.com
For organizations that require IP-based allowlisting in addition to FQDN, api3.ciiva.com resolves to the following fixed IPs:
| IP Address | FQDN |
| 166.117.122.55 | api3.ciiva.com |
| 166.117.162.112 | api3.ciiva.com |
AWS / S3 Endpoints (Client-Side)
Some client-side features require access to AWS S3 buckets. These cannot be pinned to fixed IPs (10K+ IPs in a single AWS region).
| Destination Host | Protocol | Port | Purpose | Used By |
ccv-eu.s3.eu-central-1.amazonaws.com | TCP | 443 | Saved footprints/symbols and component data ZIPs (EU) | AD Client |
ccv-us-east-1.s3.us-east-1.amazonaws.com | TCP | 443 | Saved footprints/symbols and component data ZIPs (US East) | AD Client |
ccv-us-west-2.s3.us-west-2.amazonaws.com | TCP | 443 | Saved footprints/symbols and component data ZIPs (US West) | AD Client |
ccv-asia.s3.ap-southeast-1.amazonaws.com | TCP | 443 | Saved footprints/symbols and component data ZIPs (Asia) | AD Client |
prod-afs-viewer-data-eu1.s3.eu-central-1.amazonaws.com | TCP | 443 | A365 Web Viewer data — PCB/schematic visualisation (EU) | Browser (A365 web UI) |
prod-afs-viewer-data-ue1.s3.us-east-1.amazonaws.com | TCP | 443 | A365 Web Viewer data — PCB/schematic visualisation (US East) | Browser (A365 web UI) |
prod-afs-viewer-data-uw2.s3.us-west-2.amazonaws.com | TCP | 443 | A365 Web Viewer data — PCB/schematic visualisation (US West) | Browser (A365 web UI) |
prod-afs-viewer-data-as1.s3.ap-southeast-1.amazonaws.com | TCP | 443 | A365 Web Viewer data — PCB/schematic visualisation (Asia) | Browser (A365 web UI) |
helpidadfiles.s3.amazonaws.com | TCP | 443 | Altium Designer F1 help index download (ADES.HelpID.zip) | AD Client |
s3.amazonaws.com | TCP | 443 | General S3 access — 3D models download, etc. | AD Client |
Note: Region-specific S3 bucket FQDNs vary by workspace region. The table above includes endpoints observed in Regular US-West, US-East, Europe, and Asia environments. Prefer FQDN-based allowlisting because AWS IP ranges are large and can change.
AWS IP address ranges: The URL https://ip-ranges.amazonaws.com/ip-ranges.json is the official, live JSON document provided by Amazon Web Services (AWS) that enumerates all public IPv4 and IPv6 address ranges allocated to AWS services. Network administrators, security engineers, and DevOps teams dynamically poll this file to manage on-premises firewall rules, whitelist trusted AWS traffic, or perform egress filtering.