Skip to Main Content
IBM Z Hardware and Operating Systems Ideas Portal


This is the public portal for all IBM Z Hardware and Operating System related offerings. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

Crypto HW

Showing 43 of 3362

Enhancement on CCA/ICSF to support RSA Public Key size 8192 UKDS6 and UKDS7

Enhancement on ICSF/CCA to support RSA Public key size of 8192 on UKDS6 as well as UKDS7.
over 2 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 7 Planned for future release

Add Certificate trust verification in CSNDDSV service

Currently the option to verify the trust of a certificate is possible only by adding the CA and Intermediate CA certificates using TKE into ICSF adaptor. This is new and overhead for the limited ICSF admin team. Add option to verify the signature ...
almost 3 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 7 Future consideration

Request TR31- SECMSG Support

It is required to extend the ability to export SECMSG type keys in TR-31 format using the CSNBT31X command
almost 3 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 3 Not under consideration

CMT#AB6351

When Correctable Error(CE) occurs in the CPU L3 cache in LinuxONE, db2sysc/gskit issues KMC instruction,After recovering Correctable Error (CE), HW recovery failed because KMC instruction could not rerun that original data was already encripted.IP...
almost 4 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 2 Future consideration

ChaCha20-Poly1305 for IBM Z and LinuxONE

Requesting system hardware support particularly in IBM Crypto Express features (but also in CP Assist for Cryptographic Processing, and in operating system and middleware exploiters such as z/OS System SSL) for the ChaCha stream cipher (at least t...
about 4 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 4 Future consideration

Add zkey / paes support for the ZFS filesystem encryption

Canonical/Ubuntu is exploring using ZFS native encryption (without LUKS) when deploying on the ZFS Linux filesystem. ZFS is already available on Ubuntu Server for s390x. Currently with LUKS on s390x installers default to using zkey/paes if availab...
about 4 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 4 Not under consideration

Crypto Hardware Adjunct Processor Assignment

Crypto Adjunct Processors (APs) are assigned to Crypto PCHIDs at Power-on Reset time. In our experience they differ across multiple z15s despite being identical in hardware configuration. Can we manually assign APs to PCHIDs even if it requires a ...
about 4 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 1 Future consideration

Copy the contents of a crypto card to a new crypto card after a defective card has been replaced

After a replacement of single cryptocard, in case of a broken card, it should be possible to copy the complete config from another active card in the CEC.
almost 5 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 2 Not under consideration

Specify of the slot location for the CryptoExpress

Allow customer specification of the slot location for the Crypto card.Customer requested to specify of the slot location of the CryptoExpress with new AP number. It is also effective for ensuring redundancy.
almost 5 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 2 Not under consideration

Diversified Asymmetric keys

Would like to create diversified asymmetric keys based on a "master/seed" assymmetric key pair.Similar to what we can currently do with diversified symmetric keys. Would like this primarily for ECC.However RSA probably should also be include...And...
over 5 years ago in IBM Z and LinuxONE Systems Hardware / Crypto HW 6 Not under consideration