Skip to Main Content
IBM Power Ideas Portal

Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Post your ideas

Start by posting ideas and requests to this portal to enhance a Power product or service. Take a look at ideas others have posted and upvote them if they matter to you,

  1. Post an idea

  2. Upvote ideas and add comments to ideas that matter most to you

  3. Get feedback from the IBM team to refine your idea

Help IBM prioritize your ideas and requests

The IBM team may need your help to refine the ideas so they may ask for more information or feedback. The Power teams will then decide if they can begin working on your idea. If they can start during the next development cycle, they will put the idea on the priority list. Each team at IBM works on a different schedule, where some ideas can be implemented right away, others may be placed on a different schedule.

Receive notification on the decision

Some ideas can be implemented at IBM, while others may not fit within the development plans for the product. In either case, the team will let you know as soon as possible. In some cases, we may be able to find alternatives for ideas which cannot be implemented in a reasonable time.


Specific link you will want to bookmark for future use

IBM Unified Ideas Portal - https://ideas.ibm.com/ - Use this site to create or search for existing Ideas across all IBM products that are outside of Power, and track all of your personal interactions with all Ideas.

Status Not under consideration
Workspace IBM i
Categories Security
Created by Guest
Created on Aug 9, 2021

OS Commands and API for DCM Application Export/Import Function

In large environments with many LPARs need to be able to sync/transfer/update application definitions in DCM across without manual GUI configuration. Need capability to export an application (or multiple) to an XML or name-pair type type file; that possibly can be text manipulated; and import (add or update) on another system DCM. All the GUI changeable application definitions should be exportable to a text file. The text file should be modifiable to remove settings that need not to be changed. Upon import, only the specified settings should be modified or set. Alternative to be able to select settings/option groups to be exported.
Export/Import should be implemented at OS level commands, via GUI actions, and DCM APIs.


Use Case:

Make changes to application definition that need to be propagated out to hundreds of LPARs. Export file needs to be able to be edited to remove settings that may be custom to other local configurations and to not be transferred. Import needs to read the one/many applications in the file and make the indicated changes/additions on the target systems.


Idea priority High
  • Guest
    Nov 29, 2021

    IBM does not intend to provide an additional solution to this request, so it is being closed. Existing APIs can be used to automate "export/import" for DCM Application Definitions.

    Application definition attributes that have been updated on one partition can be replicated to other partitions with the help of a few APIs. Application definition information is retrieved from the primary partition using API QycdRetrieveCertUsageInfo. When using format RCUI0400 of this API, all information that is seen in DCM is retrieved including but not limited to TLS protocols, cipher specifications, supported signature algorithms, list of assigned certificates, the list of trusted Certificate Authorities (CAs) and more.

    Information about the application definition that was retrieved can then be modified by the calling program and used as input for API QsyRegisterAppForCertUse. When using QsyRegisterAppForCertUse on an application definition that already exists on a system, it will update the existing application with the new values specified on the call. The calling program can also assign the needed certificates to the application definitions using API QycdUpdateCertUsage and update the CA trust list with API QycdAddCACertTrust.

  • Guest
    Sep 22, 2021

    IBM has received the requirement and is evaluating it. IBM will provide a response after evaluation is complete.

  • Guest
    Sep 21, 2021

    The CAAC has reviewed this requirement and recommends that IBM view this as a “nice to have” low priority feature. This does not seem like a common scenario, and providing edit authority seems to just provide an undocumented way to do an edit.

    Background: The COMMON Americas Advisory Council (CAAC) members have a broad range of experience in working with small and medium-sized IBM i customers. CAAC has a key role in working with IBM i development to help assess the value and impact of individual RFEs on the broader IBM i community, and has therefore reviewed your RFE.

    For more information about CAAC, see www.common.org/caac

    Nancy Uthke-Schmucki - CAAC Program Manager

  • Guest
    Sep 13, 2021

    The CEAC has reviewed this requirement and recommends that IBM view this as a MEDIUM priority requirement that should be addressed.

    Background: The COMMON Europe Advisory Council (CEAC) members have a broad range of experience in working with small and medium-sized IBM i customers. CEAC has a crucial role in working with IBM i development to help assess the value and impact of individual RFEs on the broader IBM i community and has therefore reviewed your RFE.

    To find out how CEAC help to shape the future of IBM i, see CEAC @ ibm.biz/BdYSYj and the article "The Five Hottest IBM i RFEs Of The Quarter" at ibm.biz/BdYSZT

    Therese Eaton – CEAC Program Manager, IBM

  • Guest
    Aug 11, 2021

    The ability to export and import the application definitions is not available, but there is an API which allows you to create or update application definitions.
    The Register Application for Certificate Use API (https://www.ibm.com/docs/api/v1/content/ssw_ibm_i_74/apis/qsyrgap.htm) allows you modify the TLS Protocols, ciphers, signature algorithms, cache time-out values, and any other attribute that is seen on the DCM panel.

    Specifying the needed modifications within a source file and calling the API to have the update performed will reduce time and effort compared to making the change using the GUI on that many partitions.