IBM Power Ideas Portal


This portal is to open public enhancement requests against IBM Power Systems products, including IBM i. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

Security

Showing 29

Subject Alternative Name in CSR

Currently there is no way to create a CSR with a SAN. Google Chrome is now looking for a SAN instead of CN Error: "Subject Alternative Name Missing" or NET::ERR_CERT_COMMON_NAME_INVALID or "Your connection is not private"During Transport Layer Sec...
over 7 years ago in IBM i / Security 2 Delivered

Better security for password validation program

Hello, I'am wondering if that would not be possible to secure a little bit better the validation program that can be setup in the QPWDVLDPGM and/or in the "QIBM_QSY_VLD_PASSWRD » format VLDP0100 and VLDP0200 exit points. I understand that just the...
almost 5 years ago in IBM i / Security 5 Delivered

Secure Kerberos keytab file

All single sign on interface can deal with *PUBLIC=*EXCLUDE for the NAS keytab file :/QIBM/UserData/OS400/NetworkAuthentication/keytab/krb5.keytab However, if you want to enable SSO for IBM Navigator for i SSO will not work with that specific sett...
almost 5 years ago in IBM i / Security 2 Delivered

Prevent passwords that match user profile

We need a way to prevent that the password matches the user profile. The available exit programs are not bullet proof. A new system value or password rule should be created to prevent the setup of a password that matches the user profile. Use Case...
about 7 years ago in IBM i / Security 8 Delivered

Update RSTUSRPRF functionality restore Password

Currently when single user is restored using RSTUSRPRF the password is not restored . Password Restore only wotk when restoring *ALL profiles We are IBM i Security ISV and we have multiple customer wanting ability restore the password when single ...
over 2 years ago in IBM i / Security 1 Delivered

Would like QNTC to support AES SMB2 mutual authentication using Kerberos

QNTC, AES, and SMB2 fail to authenticate using Kerberos to network shares. This issue is related to the encryption type of Kerberos ticket. When AES is used, it will need a mutual authentication on the message between the client and the server, ho...
over 7 years ago in IBM i / Security 1 Delivered

Support for bcrypt - password hashing

In order to create password hashes we need the bcrypt algorithm which is currently not supported by the Qc3EncryptData API. Alternatives like SHA-512 are not suited for password hashing. We would like this API (or a new one, or a callable C-functi...
over 6 years ago in IBM i / Security 8 Delivered

Fix CHGFCNUSG processing when prompted from the WRKFCNUSG screen

If you use option 2 (Change usage) to repeatedly update a Function ID from the Work with Function Usage screen (WRKFCNUSG) the values are not always updated properly. Use Case: Assuming that QIBM_QMTF_CLIENT_REQ_0 has DEFAULT(*DENIED) ALLOBJ(*NOTU...
over 8 years ago in IBM i / Security 5 Delivered

When a user is expired by specifying USREXPDATE then QSECEXP1 should log it in the history log

I have put an expiration date on a user profile (USREXPDATE) and it was disabled as expected by the job QSECEXP1. But it is only logged in the joblog of QSECEXP1 not in the History log ( nor in the *SYSOPR message queue). This makes it difficult t...
over 8 years ago in IBM i / Security 3 Delivered

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.