Skip to Main Content
IBM Power Ideas Portal


This portal is to open public enhancement requests against IBM Power Systems products, including IBM i. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

My ideas: Security

Showing 29

Multiple Subject Alternative Names (SAN) in DCM

Maserati Spa needs for theirs cerificates a multiple SAN and not only one like now. These certificates Maserati needs to assign a server and client applications Use Case: Multiple SAN in DCM
over 6 years ago in IBM i / Security 5 Delivered

Configure telnet with SSL/TLS via command

Provide API/command to supply telnet with a self-signed digital certificate (most likely created with openssl). Use Case: Today there are many manual steps(n1) required to secure telnet. The steps to secure telnet could be made as simple as runnin...
almost 7 years ago in IBM i / Security 6 Delivered

Prevent passwords that match user profile

We need a way to prevent that the password matches the user profile. The available exit programs are not bullet proof. A new system value or password rule should be created to prevent the setup of a password that matches the user profile. Use Case...
about 7 years ago in IBM i / Security 8 Delivered

MI GENUUID Version 4

The MI instruction GENUUID should be able to generate an UUID version 4 too. Use Case: An UUID version 1 seems not to be unique enough to use it in an ELK stack. Currently we solve this problem by using java.util.UUID with RPG.
about 7 years ago in IBM i / Security 4 Delivered

Subject Alternative Name in CSR

Currently there is no way to create a CSR with a SAN. Google Chrome is now looking for a SAN instead of CN Error: "Subject Alternative Name Missing" or NET::ERR_CERT_COMMON_NAME_INVALID or "Your connection is not private"During Transport Layer Sec...
about 7 years ago in IBM i / Security 2 Delivered

Would like QNTC to support AES SMB2 mutual authentication using Kerberos

QNTC, AES, and SMB2 fail to authenticate using Kerberos to network shares. This issue is related to the encryption type of Kerberos ticket. When AES is used, it will need a mutual authentication on the message between the client and the server, ho...
over 7 years ago in IBM i / Security 1 Delivered

DCM - allow automation of Let's Encrypt certificates

The Let's Encrypt certificate authority is emerging as a free and open minimum starting point for SSL certificates. However they only issue 90 day certificates which currently would mean manually installing a new certificate at least 4 times per y...
almost 8 years ago in IBM i / Security 4 Delivered

When a user is expired by specifying USREXPDATE then QSECEXP1 should log it in the history log

I have put an expiration date on a user profile (USREXPDATE) and it was disabled as expected by the job QSECEXP1. But it is only logged in the joblog of QSECEXP1 not in the History log ( nor in the *SYSOPR message queue). This makes it difficult t...
over 8 years ago in IBM i / Security 3 Delivered

Fix CHGFCNUSG processing when prompted from the WRKFCNUSG screen

If you use option 2 (Change usage) to repeatedly update a Function ID from the Work with Function Usage screen (WRKFCNUSG) the values are not always updated properly. Use Case: Assuming that QIBM_QMTF_CLIENT_REQ_0 has DEFAULT(*DENIED) ALLOBJ(*NOTU...
over 8 years ago in IBM i / Security 5 Delivered