Skip to Main Content
IBM Power Ideas Portal

This portal is to open public enhancement requests against IBM Power Systems products, including IBM i. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (

Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.

Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal ( - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal ( - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM. - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.


My votes: Security

Showing 27

Secure Kerberos keytab file

All single sign on interface can deal with *PUBLIC=*EXCLUDE for the NAS keytab file :/QIBM/UserData/OS400/NetworkAuthentication/keytab/krb5.keytab However, if you want to enable SSO for IBM Navigator for i SSO will not work with that specific sett...
over 4 years ago in IBM i / Security 2 Delivered

Update RSTUSRPRF functionality restore Password

Currently when single user is restored using RSTUSRPRF the password is not restored . Password Restore only wotk when restoring *ALL profiles We are IBM i Security ISV and we have multiple customer wanting ability restore the password when single ...
about 2 years ago in IBM i / Security 1 Delivered

Prevent passwords that match user profile

We need a way to prevent that the password matches the user profile. The available exit programs are not bullet proof. A new system value or password rule should be created to prevent the setup of a password that matches the user profile. Use Case...
almost 7 years ago in IBM i / Security 8 Delivered

Would like QNTC to support AES SMB2 mutual authentication using Kerberos

QNTC, AES, and SMB2 fail to authenticate using Kerberos to network shares. This issue is related to the encryption type of Kerberos ticket. When AES is used, it will need a mutual authentication on the message between the client and the server, ho...
about 7 years ago in IBM i / Security 1 Delivered

Support for bcrypt - password hashing

In order to create password hashes we need the bcrypt algorithm which is currently not supported by the Qc3EncryptData API. Alternatives like SHA-512 are not suited for password hashing. We would like this API (or a new one, or a callable C-functi...
over 6 years ago in IBM i / Security 8 Delivered

Fix CHGFCNUSG processing when prompted from the WRKFCNUSG screen

If you use option 2 (Change usage) to repeatedly update a Function ID from the Work with Function Usage screen (WRKFCNUSG) the values are not always updated properly. Use Case: Assuming that QIBM_QMTF_CLIENT_REQ_0 has DEFAULT(*DENIED) ALLOBJ(*NOTU...
about 8 years ago in IBM i / Security 5 Delivered

When a user is expired by specifying USREXPDATE then QSECEXP1 should log it in the history log

I have put an expiration date on a user profile (USREXPDATE) and it was disabled as expected by the job QSECEXP1. But it is only logged in the joblog of QSECEXP1 not in the History log ( nor in the *SYSOPR message queue). This makes it difficult t...
about 8 years ago in IBM i / Security 3 Delivered