# WHATPORT(16993)

## NAME

port 16993 — Intel AMT SOAP/HTTPS — The TLS version of the Intel AMT management interface, available once AMT has a certificate.

Protocol: TCP  
IANA registry

## DESCRIPTION

IANA registers 16993 to Intel as amt-soap-https. It carries the same SOAP/WS-Management interface as 16992 with TLS, and is the port AMT uses once it is provisioned in TLS mode; 16995 is the matching encrypted redirection port. Like 16992 it is answered by the Management Engine independently of the installed OS, so it survives reinstalls and appears on machines whose owners do not know AMT is enabled.

## EXPOSURE

**Do not expose.** TLS fixes the eavesdropping problem, not the exposure problem: this is out-of-band control of the hardware, historically vulnerable to firmware-level auth bypass. Keep it on a management network.

## CHECK

```sh
openssl s_client -connect TARGET:16993 -servername TARGET </dev/null 2>/dev/null | openssl x509 -noout -subject -issuer -dates
```

## SEE ALSO

- iana — [IANA Service Name and Transport Protocol Port Number Registry — 16993 (amt-soap-https)](https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=16993) (iana.org)
- docs — [INTEL-SA-00075 — AMT/ISM/SBT escalation of privilege (CVE-2017-5689)](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00075.html) (intel.com)
- source — [Device Management Toolkit — deployment (formerly Intel Open AMT Cloud Toolkit)](https://github.com/device-management-toolkit/deployment) (github.com)

---

HTML: <https://whatport.net/16993/> · JSON: <https://whatport.net/16993.json> · full dataset: <https://whatport.net/ports.json>