IBM Power Ideas Portal


This portal is to open public enhancement requests against IBM Power Systems products, including IBM i. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Add a new idea Subscribe
Status Not under consideration
Workspace IBM i
Categories Security
Created by Guest
Created on Aug 9, 2021

RELATED IDEAS

OS Commands and API for DCM Application Export/Import Function

In large environments with many LPARs need to be able to sync/transfer/update application definitions in DCM across without manual GUI configuration. Need capability to export an application (or multiple) to an XML or name-pair type type file; that possibly can be text manipulated; and import (add or update) on another system DCM. All the GUI changeable application definitions should be exportable to a text file. The text file should be modifiable to remove settings that need not to be changed. Upon import, only the specified settings should be modified or set. Alternative to be able to select settings/option groups to be exported.
Export/Import should be implemented at OS level commands, via GUI actions, and DCM APIs.


Use Case:

Make changes to application definition that need to be propagated out to hundreds of LPARs. Export file needs to be able to be edited to remove settings that may be custom to other local configurations and to not be transferred. Import needs to read the one/many applications in the file and make the indicated changes/additions on the target systems.


Idea priority High
  • Guest
    Reply
    |     Nov 29, 2021

    IBM does not intend to provide an additional solution to this request, so it is being closed. Existing APIs can be used to automate "export/import" for DCM Application Definitions.

    Application definition attributes that have been updated on one partition can be replicated to other partitions with the help of a few APIs. Application definition information is retrieved from the primary partition using API QycdRetrieveCertUsageInfo. When using format RCUI0400 of this API, all information that is seen in DCM is retrieved including but not limited to TLS protocols, cipher specifications, supported signature algorithms, list of assigned certificates, the list of trusted Certificate Authorities (CAs) and more.

    Information about the application definition that was retrieved can then be modified by the calling program and used as input for API QsyRegisterAppForCertUse. When using QsyRegisterAppForCertUse on an application definition that already exists on a system, it will update the existing application with the new values specified on the call. The calling program can also assign the needed certificates to the application definitions using API QycdUpdateCertUsage and update the CA trust list with API QycdAddCACertTrust.

  • Guest
    Reply
    |     Sep 22, 2021

    IBM has received the requirement and is evaluating it. IBM will provide a response after evaluation is complete.

  • Guest
    Reply
    |     Sep 21, 2021

    The CAAC has reviewed this requirement and recommends that IBM view this as a “nice to have” low priority feature. This does not seem like a common scenario, and providing edit authority seems to just provide an undocumented way to do an edit.

    Background: The COMMON Americas Advisory Council (CAAC) members have a broad range of experience in working with small and medium-sized IBM i customers. CAAC has a key role in working with IBM i development to help assess the value and impact of individual RFEs on the broader IBM i community, and has therefore reviewed your RFE.

    For more information about CAAC, see www.common.org/caac

    Nancy Uthke-Schmucki - CAAC Program Manager

  • Guest
    Reply
    |     Sep 13, 2021

    The CEAC has reviewed this requirement and recommends that IBM view this as a MEDIUM priority requirement that should be addressed.

    Background: The COMMON Europe Advisory Council (CEAC) members have a broad range of experience in working with small and medium-sized IBM i customers. CEAC has a crucial role in working with IBM i development to help assess the value and impact of individual RFEs on the broader IBM i community and has therefore reviewed your RFE.

    To find out how CEAC help to shape the future of IBM i, see CEAC @ ibm.biz/BdYSYj and the article "The Five Hottest IBM i RFEs Of The Quarter" at ibm.biz/BdYSZT

    Therese Eaton – CEAC Program Manager, IBM

  • Guest
    Reply
    |     Aug 11, 2021

    The ability to export and import the application definitions is not available, but there is an API which allows you to create or update application definitions.
    The Register Application for Certificate Use API (https://www.ibm.com/docs/api/v1/content/ssw_ibm_i_74/apis/qsyrgap.htm) allows you modify the TLS Protocols, ciphers, signature algorithms, cache time-out values, and any other attribute that is seen on the DCM panel.

    Specifying the needed modifications within a source file and calling the API to have the update performed will reduce time and effort compared to making the change using the GUI on that many partitions.

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.