IBM Power Ideas Portal


This portal is to open public enhancement requests against IBM Power Systems products, including IBM i. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Add a new idea Subscribe
Status Not under consideration
Workspace IBM i
Categories Save and Restore
Created by Guest
Created on Sep 13, 2021

RELATED IDEAS

Remove certificate requirement from ObjectConnect over TCP/IP

Add "no certificate" option for ObjectConnect over TCP/IP.
Other object transfer tools/functions do not have such requirement.
- FTP -> FTPS is optional
- HTTP -> https is optional
- Ansible plugins -> Not in "Requirements"


Use Case:

Easily configure ObjectConnect over TCP/IP network and send/receive IBM i objects effectively.
Customers can :
- Deploy object from development to production
- Send IBM i objects to other servers/partitions for synchronization, development, PD, etc.


Idea priority Medium
  • Guest
    Reply
    |     Nov 29, 2021

    IBM does not intend to provide a solution to this request, so it is being closed. Configuring certificates is a common activity for security/system administrators today and becomes easier to do with each new DCM, API, or SQL Service enhancement. There is information, examples and internet videos available to administrators on how to use DCM and configure certificates.

  • Guest
    Reply
    |     Nov 23, 2021

    Thank you for your update.

    > Meanwhile, strategically, the vital data should be protected when flying over network, even in internal networks.
    I don't know if all traffics (including 5250 and old TCP/IP protocols) between IBM i servers which contains "vital data" are protected.
    If it is true, I'd like IBM to provide easier way to use ObjectConnect without any hassle.
    If there are exceptions (like plain FTP?), it is preferable to have "install and go" option for most customers, I guess.

    > The customer can create a local CA on one system, then create a certificate with a validity date many years into the future.
    After many years :
    - Nobody may remember how to configure DCM after many years.
    - DCM UI may be changed drastically and the customer have to search for new IBM document as old procedure do not work.
    - Many customers migrate their server by 3 to 5 years, so "certificate with a validity date many years" may not work at that time. This would be a big obstacle for a customer to migrate to new POWER server.

  • Guest
    Reply
    |     Oct 28, 2021

    ObjectConnect sends user profile and password to authenticate with target system. Without TLS, the password text is flying over network. This exposes the sensitive data to network. Meanwhile, strategically, the vital data should be protected when flying over network, even in internal networks.
    When the ObjectConnect is used in internal network. The customer can create a local CA on one system, then create a certificate with a validity date many years into the future. The server certificate can be imported to multiple systems where the ObjectConnect is used. Then assign the server certificate to application QIBM_QSVR_OBJC_SERVER on those systems. After these steps, the ObjectConnect can work between these systems.
    There are lots of information to assist DCM setting up and management in this article:
    https://www.ibm.com/support/pages/digital-certificate-manager-dcm-frequently-asked-questions-and-common-tasks

  • Guest
    Reply
    |     Sep 20, 2021

    Due to processing by IBM, this request was reassigned to have the following updated attributes:
    Brand - Servers and Systems Software
    Product family - Power Systems
    Product - IBM i
    Component - Save, Restore
    Operating system - IBM i
    Source - None

    For recording keeping, the previous attributes were:
    Brand - Servers and Systems Software
    Product family - Power Systems
    Product - IBM i
    Component - Core OS
    Operating system - IBM i
    Source - None

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.