## Network Access

- General (all applications):
  Must allow outgoing connections on Port TCP/443 to my.picture-instruments.com for license activation and verification (IPv6 and IPv4).

- Crop'n'Resize:
  Incoming TCP/2944 (localhost only) for communication with other PI software (Serial Shot).
  Outgoing TCP connections as per configured upload modules (e.g., port TCP/443 for Amazon S3 or port TCP/22 for SFTP).
  Outgoing TCP/443 for Amazon SNS if configured.

- Serial Shot:
  For communication with other Picture Instruments software (if used), all ports on localhost only:
   Outgoing TCP/2944 for communication with Crop'n'Resize.
   Outgoing TCP/2563 for communication with 360 Webspin.
   Outgoing TCP/3165 for communication with Mask Integrator.
   Outgoing TCP/3367 for communication with Mask Integrator AI.
   Outgoing TCP/2712 for communication with Chroma Mask.
  Turntable:
   Outgoing UDP/20555 and incoming UDP/20556 for detecting the turntable on the network (if automatic connection is used).
   Outgoing TCP/10001 for controlling the turntable.
  Cameras:
   Outgoing TCP/80 to access the Ricoh Theta camera.
   Incoming UDP/5353 to detect WiFi-connected cameras (Canon, Nikon, etc.).
   Incoming TCP/51560 and outgoing UDP/51562 to detect WiFi-connected cameras (Fuji).

- 360 Webspin:
  Incoming TCP/2563 (localhost only) for communication with other PI software (Serial Shot).

- Mask Integrator:
  Incoming TCP/3165 (localhost only) for communication with other PI software (Serial Shot).

- Mask Integrator AI:
  Incoming TCP/3367 (localhost only) for communication with other PI software (Serial Shot).
  Outgoing TCP/443 to polaris.picture-instruments.com for communication with the PI AI Service.

- Chroma Mask:
  Incoming TCP/2712 (localhost only) for communication with other PI software (Serial Shot).

## File System Access

- General (all applications):
  Read and write access to %APPDATA%\Picture Instruments\<Application Name>
  (Read and write access to %PUBLIC%\Picture Instruments)

- Serial Shot:
  Read/Write/Execute files in %TEMP% (for Exiftool to read/write image metadata)
  Read/Write access to configured workspace folder (an arbitrary, user-defined local folder)
  If configured: Read/Write access to external drives for data import (identified by volume label)

- Crop'n'Resize:
  Read/Write/Execute files in %TEMP% (for Exiftool to read/write image metadata)
  Read access to data in the Serial Shot workspace folder
  Write/Delete access to configured output folders (Delete only if "Delete after successful upload" is configured).

- 360 Webspin, Mask Integrator, Mask Integrator AI, Chroma Mask:
  Read/Write/Execute files in %TEMP% (for Exiftool to read/write image metadata)
  Read/Write access to the Serial Shot workspace folder
  Read/Write access to paths configured as load/save locations.

## Registry and Other Access:

- General (all applications):
  Read and write access to HKCU\SOFTWARE\Picture Instruments as well as HKCU\SOFTWARE\Picture Instruments\<Application Name>
  Read access to HKLM\SOFTWARE\Microsoft\Cryptography (for license activation and verification)
  Read system properties via WMI2 (for license activation and verification)

- Crop'n'Resize:
  Read access to HKCU\SOFTWARE\Picture Instruments\Serial Shot (to exchange metadata information)

## Camera Control and Data Transfer via USB

- For each supported and used camera model, a PI-provided driver for the camera must be installed (the driver is only an .inf file that changes the camera's association within Windows from MTP.sys/PTP.sys to WinUSB.sys).
- Serial Shot must have access to the USB device of the camera.