IBM Power Ideas Portal


This portal is to open public enhancement requests against IBM Power Systems products, including IBM i. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

My votes: Security

Add additional user profile parameter associated with OWNER(*GRPPRF) to close security vulnerability.

Lately I discovered a new security risk when user profile has GRPPRF(XXXX) and OWNER(*GRPPRF) specified. When such user creates another user profile or authorization list all XXXX group members can use these objects to get unauthorized access at l...
3 days ago in IBM i / Security Submitted

We need a way to monitor the QPWFSERVER *AUTL and authority needed.

We need a way to monitor the QPWFSERVER *AUTL and authority needed. The QPWFSERVER *AUTL can be used for preventing users to access the /QSYS.LIB filesystem with IBM i Access, IBM i NetServer, Java Toolbox, File Server etc. The shipping value for ...
8 days ago in IBM i / Security Submitted

Security Bulletins filtering search by IBM i products

Possibility to search by IBM i products (5770JV1, 5770DG1, etc.) when searching for the latest vulnerabilities instead of just "IBM i" will significantly improve the time needed for evaluation of necessary patching.
21 days ago in IBM i / Security Submitted

Exit point for QIBM_QSY_CHG_PROFILE Does not detect disabled profiles

The QIBM_QSY_CHG_PROFILE exit point does not have a trigger for when a profile is disabled due to to many invalid sign on attempts.
22 days ago in IBM i / Security Submitted

Add QIBM_DEBUG_SERVER Application definition to os 7.5 so debug can be used with TLS.

We have a requirement to make all connections secure with TLS and that is not available for DEBUG running on 7.5. The QIBM_QTES_DEBUG_SERVER was not added in DCM at V7R5 and is only available from V7R6 and forward.The ACS Base client new version t...
about 2 months ago in IBM i / Security Under review

The SYSTOOLS.CVE_INFO table function does not provide the list of corrective PTFs

The SYSTOOLS.CVE_INFO table function does not provide the list of corrective PTFs. We must search the HTML page to find the list of corrective PTFs. It would be nice to have a field with the list of corrective PTFs and also to get the affected pro...
about 2 months ago in IBM i / Security Submitted

CVE function to include to Open/Remediated column

It will help the system administrators to generate securityExtend the SYSTOOLS.CVE_INFOtable function to include the remediation status of each CVE on the local IBM i system. This would allow administrators to easily distinguish between resolved a...
2 months ago in IBM i / Security Submitted

Add the ability to process bundled certificate files in DCM

When you receive a Certificate file from a CA that has bundled Intermediate certificates in a single file you have to manually extract each certificate and install them in order to ensure the related certificates are available for verification. Th...
3 months ago in IBM i / Security Submitted

Zero-downtime security updates for exit program changes

Running server jobs must pick up new exit programs, updated or replaced programs, and removed programs without requiring restart. Active client connections must not be disconnected and session state must be fully preserved. The solution must apply...
3 months ago in IBM i / Security Under review

Counterpart to *NOQTEMP in QAUDCTL system value for IFS directories

In system value QAUDCTL we are able to specify *NOQTEMP to avoid audit journal recording activities in QTEMP libraries of users. This reduces significant audit log entries for activities in temporary library. What's missing is the same for a defin...
4 months ago in IBM i / Security Submitted

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.