Skip to Main Content
IBM Z Hardware and Operating Systems Ideas Portal


This is the public portal for all IBM Z Hardware and Operating System related offerings. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

ICSF

Showing 35

Availability of Cryptographic Services

When ICSF is started it will check the Master Key Verification Patterns(MKVP) in the header records of the CKDS and PKDS. When an MKVP is found then a check is made to see if that Master Key is found in the coprocessors. If it is found and it matc...
over 3 years ago in z/OS / ICSF 1 Future consideration

List available SSL/TLS Ciphers with info about use of Crypto Cards

In CICS communication (SSL/TLS) with ATM a Cipher is selected/negotiated. Please make a list of all ciphers with informations about which can run in the CryptoCard e.g. CEX6C (HW) to offload the usage of CPU, and which can only run using the norma...
about 4 years ago in z/OS / ICSF 0 Future consideration

ICSF: Determine when key was last used for encryption

We would like a way to determine when a key was last referenced for encryption.
over 4 years ago in z/OS / ICSF 0 Future consideration

Function requirement - To support TRANSKEY+WRAPENH3 keyword in KGUP utility

PCI-PIN spec defined the key storage need to use key block format when store key tokens. IBM announced the WRAPENH3 format to comply PCI-PIN requirement which should support different ways to store key as WRAPENH3 format, including Key Generator U...
9 months ago in z/OS / ICSF 1 Future consideration

Option to ignore CRL expiry date in TR34 ICSF services

TR34 RKL ICSF services CSNDT34B and CSNDT34D uses CRL from CA for generating the TOKEN. One of the CA is sending a CRL valid for only one day, but confirmed that the EPP does not validate the CRL End date. Is it possible to provide an option to ig...
over 2 years ago in z/OS / ICSF 1 Future consideration

ICSF Keylabel Groups

We would like to have the ability to organise/display ICSF keylabels in the CKDS/PKDS via an installation-defined free-form text grouping name (e.g. Credit Card)
almost 4 years ago in z/OS / ICSF 3 Not under consideration

Move ICSF cell pools above the bar

If a high enough burst of ATTLS requests comes in at once, ICSF cell pools can grow rapidly enough and fill CSF private storage. This results in ABEND878s and TCPIP leaving the sysplex group. At this point, an IPL is likely desired. Moving these c...
5 months ago in z/OS / ICSF 1 Future consideration

Populate SMF 82 40 CMACZERO fingerprint for more key types

Having a single key fingerprint or checksum in the SMF data leads to collisions when trying to validate that the same key is not present in multiple environments. Having a second fingerprint in the SMF 82 40 records would help us to determine whet...
11 months ago in z/OS / ICSF 2 Future consideration

Add ICSF Flush command

Provide a mechanism to complete any remaining ICSF work in-flight to be executed just prior to lpar shutdown. This would be in lieu of actually stopping ICSF.
over 2 years ago in z/OS / ICSF 1 Future consideration

Verify/Compare ISO-4 Encrypted pin blocks

Currently to validate an ISO-0 Encrypted pin block we compare the cipher text of 2 pin blocks. We would like to do the same but ISO-4 pin blocks have a random component to it so that cipher text can never be the same. We would like an API that tak...
over 3 years ago in z/OS / ICSF 1 Future consideration