Port 5986 — WinRM HTTPS

Port 5986 — TCP

Windows remote administration using WinRM over HTTPS.

What is port 5986 used for?

Windows Remote Management protected by TLS.

Transport protocol

TCP

Security precautions

Use valid server certificates and restrict authorized sources.

Should we open this port in the firewall?

Allow this port only when a required service uses it. Apply least privilege: restrict authorized sources, destinations and interfaces, and log connections where appropriate.

How do I check this port?

Test-NetConnection SERVER -Port 5986

On Linux, nc -vz SERVER 5986 checks TCP connectivity only. A successful TCP connection does not validate the application, authentication or TLS configuration.

Port-to-service mappings are common conventions. Applications can use a different configured port; confirm the actual service and transport.