Your phones use SCCP or SIP protocol to communicate with CM + TFTP for config and firmware, you need to open RTP stream to phones - not sure where is your voice GW. Probably you will need HTTP/HTTPS or someting more like LDAP or Cisco Directory.
More less that's all but best option is to check with ISP what need to be open exactly.
Are you getting this error “Installer User Interface Mode Not Supported. The installer cannot run in this UI mode. To specify the interface mode, use the -i command-line option, followed by the UI mode identifier. The value UI mode identifiers...
The below trick might come handy when you have to add a new node to a cluster but you don't have or is unsure of the security password for the publisher. This procedure has been around for ages.
1) Login into the CLI of the Publisher.