diff --git a/pykmip_install.sh b/pykmip_install.sh
index 03b76da..1a9fe4c 100644
--- a/pykmip_install.sh
+++ b/pykmip_install.sh
@@ -50,5 +50,18 @@ StandardInput=tty-force
 WantedBy=multi-user.target
 EOF
 
+# add firewall service file and update firewall
+cat << EOF > /etc/firewalld/services/kmip.xml
+<?xml version="1.0" encoding="utf-8"?>
+<service>
+  <short>KMIP</short>
+  <description>KMIP server</description>
+  <port protocol="tcp" port="5696"/>
+</service>
+EOF
+
+firewall-cmd --add-service=kmip --permanent
+firewall-cmd --reload
+
 systemctl daemon-reload
 systemctl enable pykmip.service
\ No newline at end of file