Skip to Main Content
IBM Z Hardware and Operating Systems Ideas Portal


This is the public portal for all IBM Z Hardware and Operating System related offerings. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

ICSF

Showing 35

ICSF Keylabel Alias Support

In order to remove the need to change hard-coded ICSF key label names within applications and the RACF database, we would like to have the ability to assign one-or-more aliases to a keylabel in the CKDS/PKDS. For example, we might have the followi...
almost 4 years ago in z/OS / ICSF 2 Future consideration

Enhanced ICSF Query Facility to display cryptographic hardware segment information

We would like an enhanced CSFIQF ICSF query that would provide cryptographic segment 1-3 configuration detail similar to that provided within the HMC displays. (an example of the HMC segment information we would like to see as part of an CSFIQF fu...
over 5 years ago in z/OS / ICSF 2 Future consideration

ICSF panels - add key label usage / search function

Would like the ability to display what key labels were used during a certain interval or past xx days. With HCR77B0+ ICSF can track what keys were used, but there isn't an 'off the shelf' solution for sysprogs/admins to be able to view the data, i...
over 6 years ago in z/OS / ICSF 2 Not under consideration

Lift CV restrictions on NOCV EXPORTER/IMPORTER keys

NOCV IMPORTER/EXPORTER keys are only valid for a IMPORTER/EXPORT with a default CV. This unnecessary limits the use of the keys and also prevents the security mechanism of adding the ENH-ONLY bit to the CV.
over 7 years ago in z/OS / ICSF 3 Not under consideration

Support to use CICS-ICSF Attachment Facility from C/C++ linkage

the CICS-ICSF Attachment Facility ca not be utilized when invoking ISCF API's via C linkage or 64 bit assembler stubs. The CICS-ICSF Attachment Facility can ONLY be utilized by 31 bit assembler stubs. We request support to use CICS-ICSF Attachment...
over 8 years ago in z/OS / ICSF 2 Not under consideration

Remove an MKVP from a KDS header record

SUBMITTER SECTIONFIT Number: MR1213136045User Marketing Field Requirement Number: MR1213136045Title: Remove an MKVP from a KDS header recordSubmitted By: Laura M Danieli/Poughkeepsie/IBMOriginators Area: POKFPOC: John Petreshock/Poughkeepsie/IBM S...
about 10 years ago in z/OS / ICSF 1 Planned for future release

ICSF: quick rollback to the old master key in case of problems with the coordinated change Master Key

Normally we load the 2 parts of the mk from the TKE. Then from the ICSF we make the option Coordinated xKDS change MK. This process change the new MK in alls systems of the sysplex (re-enchypher included). This process seems very robust. But in ca...
almost 2 years ago in z/OS / ICSF 1 Not under consideration

Add option to accept BASE94 ct_krd token in TR34 CSNDT34B BIND service

As per AANDC protocol the KRD is sending BASE94 format ct_krd token to Remote Key Loading application. The CSNDT34B BIND service accepts only DER format. Hence the RKL application has to perform a conversion and there is a possibility that it coul...
almost 3 years ago in z/OS / ICSF 3 Future consideration

KDSR validity date setting that would indicate an inactive state when a valid activation/expiration date is not set.

We would like to have a KDSR validity date setting that would indicate an inactive state when a valid activation/expiration date is not set.
over 5 years ago in z/OS / ICSF 1 Future consideration

Allow ICSF to use a caller supplied ACEE and STOKEN on RACROUTE authorization requests

ICSF provided callable service CSFACEE to allow the requestor to supply a security environment using a RACF ENVR, to be used by ICSF when performing authorization checks rather than the default ACEE. But that does not help in environments, like Db...
over 6 years ago in z/OS / ICSF 2 Not under consideration