IBM Z Hardware and Operating Systems Ideas Portal


This is the public portal for all IBM Z Hardware and Operating System related offerings. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

My ideas: ICSF

Showing 36 of 3548

ICSF Keylabel Groups

We would like to have the ability to organise/display ICSF keylabels in the CKDS/PKDS via an installation-defined free-form text grouping name (e.g. Credit Card)
over 4 years ago in z/OS / ICSF 3 Not under consideration

ICSF: quick rollback to the old master key in case of problems with the coordinated change Master Key

Normally we load the 2 parts of the mk from the TKE. Then from the ICSF we make the option Coordinated xKDS change MK. This process change the new MK in alls systems of the sysplex (re-enchypher included). This process seems very robust. But in ca...
over 2 years ago in z/OS / ICSF 1 Not under consideration

Verify/Compare ISO-4 Encrypted pin blocks

Currently to validate an ISO-0 Encrypted pin block we compare the cipher text of 2 pin blocks. We would like to do the same but ISO-4 pin blocks have a random component to it so that cipher text can never be the same. We would like an API that tak...
almost 4 years ago in z/OS / ICSF 1 Future consideration

ICSF Keylabel Alias Support

In order to remove the need to change hard-coded ICSF key label names within applications and the RACF database, we would like to have the ability to assign one-or-more aliases to a keylabel in the CKDS/PKDS. For example, we might have the followi...
over 4 years ago in z/OS / ICSF 2 Future consideration

Add option to accept BASE94 ct_krd token in TR34 CSNDT34B BIND service

As per AANDC protocol the KRD is sending BASE94 format ct_krd token to Remote Key Loading application. The CSNDT34B BIND service accepts only DER format. Hence the RKL application has to perform a conversion and there is a possibility that it coul...
over 3 years ago in z/OS / ICSF 3 Future consideration

Enhanced ICSF Query Facility to display cryptographic hardware segment information

We would like an enhanced CSFIQF ICSF query that would provide cryptographic segment 1-3 configuration detail similar to that provided within the HMC displays. (an example of the HMC segment information we would like to see as part of an CSFIQF fu...
about 6 years ago in z/OS / ICSF 2 Future consideration

ICSF panels - add key label usage / search function

Would like the ability to display what key labels were used during a certain interval or past xx days. With HCR77B0+ ICSF can track what keys were used, but there isn't an 'off the shelf' solution for sysprogs/admins to be able to view the data, i...
about 7 years ago in z/OS / ICSF 2 Not under consideration

Enhance ICSF to support dynamic Enable and Disable for ICSF TKDS

Current and recent releases of ICSF provide a function to Enable and Disable dynamic updates to ICSF CKDS & PKDS datasets - I believe via PANELID CSFACF00. This function is missing for ICSF TKDS dataset. It would be nice to have consistency a...
over 2 years ago in z/OS / ICSF 0 Future consideration

Lift CV restrictions on NOCV EXPORTER/IMPORTER keys

NOCV IMPORTER/EXPORTER keys are only valid for a IMPORTER/EXPORT with a default CV. This unnecessary limits the use of the keys and also prevents the security mechanism of adding the ENH-ONLY bit to the CV.
about 8 years ago in z/OS / ICSF 3 Not under consideration

KDSR validity date setting that would indicate an inactive state when a valid activation/expiration date is not set.

We would like to have a KDSR validity date setting that would indicate an inactive state when a valid activation/expiration date is not set.
about 6 years ago in z/OS / ICSF 1 Future consideration

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.