Skip to Main Content
IBM Power Ideas Portal


This portal is to open public enhancement requests against IBM Power Systems products, including IBM i. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Not under consideration
Workspace IBM i
Categories IBM i Access Family
Created by Guest
Created on Aug 6, 2021

Allow SSH for 5250

Telnet has been identified as a security risk, which is mitigated by the TLS1.2 security applied to it, but I would like to see the connection for IBM Access Client Solution 5250 sessions have the option to use an SSH connection instead of Telnet. This would save a lot of time and energy wasted on explaining the use of telnet to security teams and proving that it is secure during regular audits and reviews.


Use Case:

When configuring access to an IBMi system, Access Client Solutions should have the option to use an SSH connection instead of Telnet, with the same functionality for 5250 emulation sessions.


Idea priority Medium
  • Guest
    Reply
    |
    Aug 25, 2021

    Thank you for submitting your Request For Enhancement. After evaluating your submission, the decision at this time is to not provide this support.

  • Guest
    Reply
    |
    Aug 12, 2021

    If the security team does not understand TELNET-SSL but want to use SSH (because this is what they know), they should update their knowledge.
    For sure one can use SSH to connect to a server and then run a TN5250 LOCALHOST - but this is not very user friendly.
    Implementing TELNET via SSH in the ACS product might produce additional work as there is more than one port / application to handle.

  • Guest
    Reply
    |
    Aug 8, 2021

    I understand the question but properly securing SSH is already a nightmare... all kinds of different "protocols" over the same port.

    TELNET SSL works fine... educated your auditors, it tells more about the auditors than TELNET SSL if they don't understand it.

  • Guest
    Reply
    |
    Aug 6, 2021

    Have you tried installing TN5250 emulator and configure your SSH session?
    https://www.linkedin.com/pulse/ibm-i-getting-secure-tn5250-emulator-chrome-browser-diego-kesselman/