Port 5696Key Management Interoperability Protocol (KMIP)

KMIP servers use TCP 5696 to let clients manage cryptographic keys and other security objects, typically over TLS.

transport: tcp
in transit: encrypted
assignment: official
risk: 6/10
lookups: 0

also known as kmip

Technical Details

what runs on :5696

KMIP is a client-server protocol for interoperable management of cryptographic keys and related objects. TCP 5696 is the conventional port for KMIP over TLS: after the TLS handshake, KMIP messages use the Tag-Type-Length-Value (TTLV) encoding, with request and response operations carried over the connection. TLS details and supported KMIP versions depend on the implementation; there is no implication that every deployment uses the same version or configuration.

Security Information

exposure of :5696

risk score

6/ 10risk

treat as sensitive. widely scanned and regularly exploited when reachable — restrict it to known sources.

security averages 3.0 across 395 ports — this one sits 3.0 above.

in transit

encrypted

payloads are protected on the wire

assignment

official

registered with iana for this service — scanners fingerprint it by number

reachable over

tcp

every listening transport is another surface to filter at the edge

security overview

KMIP endpoints can expose operations over an organization's cryptographic keys, so access should be restricted to authorized clients and trusted network segments rather than exposed to the public internet. Deployments commonly use TLS and may use certificate-based client authentication; weak access controls or a compromised client can put protected data at risk. Keep server software and TLS configuration maintained, and monitor for unexpected connections.

Record

iana registry entry

port: :5696
service: Key Management Interoperability Protocol (KMIP)
transport: TCP
encryption: tls / encrypted
assignment: iana registered
risk: 6/10risk
category: Security
usage: This port is used by KMIP key-management servers, including key management systems and some storage or security appliances, for clients that need to create, retrieve, rotate, or manage cryptographic keys. It is a standards-based assignment, though it is uncommon in general internet scans and is more likely to appear inside enterprise networks.
lookups: 0rank 993
added: 2026-10-09
updated: 2026-10-09
references: IANA service name registry — port 5696

Something wrong?

This record is maintained by the engineers who use port 5696. Every field on it is editable — change what's wrong, say how you know, and a reviewer publishes it, usually within a minute. Last touched 2026-10-09.

01edit any field on a page of its own
02a model checks it for accuracy and spam
03clean and confident goes live immediately

edit this record →back to the registry

Related Ports

all 395 in security →

the 8 most looked-up other ports in security — 395 ports carry that label.

port	service	proto	category	risk	views
:8881	Atlasz Secure Server	TCP	Web Services	caution	67.6k
:443	HTTPS	TCPtls	Web Services	caution	65.9k
:8291	Winbox MikroTik Admin	TCP	Security	caution	62.9k
:3268	Microsoft Global Catalog (GC)	TCPUDP	Security	caution	54.6k
:135	Microsoft EPMAP	TCPUDP	Security	caution	51.9k
:3128	Squid Proxy HTTP	TCP	Web Services	caution	45.8k
:8080	HTTP Alternate	TCP	Web Services	caution	44.9k
:7000	Vuze HTTPS Tracker	TCPtls	Security	caution	28.9k

risk mix of the 8 listed

caution100%

2 of 8 encrypted

Port :5696Key Management Interoperability Protocol (KMIP)

Technical Details

Security Information

Related Ports

Port 5696Key Management Interoperability Protocol (KMIP)