Skip to Main Content
IBM Z Hardware and Operating Systems Ideas Portal


This is the public portal for all IBM Z Hardware and Operating System related offerings. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

My ideas: Crypto HW

Showing 24

Ability to route SSL workloads to CEXC instead of CPACF.

Ability to route all SSL crypto functions to the CEXC. Customer need a switch to move workloads off the CPACF and to the CEXC to reduce MSUs.
about 10 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 4 Not under consideration

Request TR31- SECMSG Support

It is required to extend the ability to export SECMSG type keys in TR-31 format using the CSNBT31X command
over 3 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 3 Not under consideration

eIDAS for ICSF and MCL for CEX*S

Remote Signatures according eIDAS (eIDAS is an EU regulation on electronic identification and trust services for electronic transactions in the internal market. It is a set of standards for electronic identification and trust services for electron...
over 7 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 6 Not under consideration

simplify repair actions of broken crypto cards

If a crypto card has broken in zHW, it is very complex to bring a replaced card in production again. Two or more people has to be at TKE to do that. Usually, this people are not at standby, so it could last a couple of days to be fully redundant a...
over 2 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 2 Not under consideration

Copy the contents of a crypto card to a new crypto card after a defective card has been replaced

After a replacement of single cryptocard, in case of a broken card, it should be possible to copy the complete config from another active card in the CEC.
over 5 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 2 Not under consideration

Specify of the slot location for the CryptoExpress

Allow customer specification of the slot location for the Crypto card.Customer requested to specify of the slot location of the CryptoExpress with new AP number. It is also effective for ensuring redundancy.
over 5 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 2 Not under consideration

Need CSFPPKS/CSFPPKV to also support ECC PKCS11 encrypt/decrypt

Currently we make use of CSFPPKS/CSFPPKV to perform PKCS11 encrypt/decrypt with RSA keys. There is a requirement by our clients to also support ECC PKCS11 encrypt/decrypt.
over 8 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 6 Not under consideration

Scripting

- Logical Separation- Independence from HW, FW, OS, etc- Ability to combine multiple CCA commands
about 10 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 2 Not under consideration

Wrapping symmetric keys using ECC

Need the ability to export and import symmetric keys using stronger Elliptic Curve technology. The CSNDSYX and CSNDSYI/CSNDSYI2 APIs do not support using an ECC key pair for wrapping key material.
over 7 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 6 Not under consideration

Requesting enhancement to allow Hex assigned domain number for crypto card naming convention

Wells Fargo Bank has asked IBM to submit a request for enhancement to allow a crypto card to have a hex assigned Domain Number verses decimal only for naming convention and management simplicity. This would enable large complex customers the abili...
over 7 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 2 Not under consideration