Skip to Main Content
IBM Z Hardware and Operating Systems Ideas Portal


This is the public portal for all IBM Z Hardware and Operating System related offerings. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Submitted
Created by Guest
Created on Nov 18, 2025

Support automated install/update of OSA-ICC Certificates

Large environments can have dozens of ICC consoles to support out of band access to TN3270/Master Consoles. If the organization has standards/restrictions around the sharing/reuse of certificates, there's a large operational burden in renewing these certificates. I'm not even sure if importing a certificate generated off-platform is supported, but it would be good to be able to utilize the HMC API to manage the OSA-ICC certificates. This way it could be automated via an external process, like an Ansible playbook. Ideally it lets an authorized user install and activate a new PKCS12 certificate to be presented by the OSA-ICC. Optionally there are provisions for generating and retrieving a CSR via the API, and then importing the signed certificate once that has been completed.

 

Idea priority Low
  • Guest
    Nov 18, 2025

    This could be very useful. It would not only reduce much time spent on this process, but also in automating some steps this could mitigate risks involved in the transfer and handling of files. 

  • Guest
    Nov 18, 2025

    I think this a great idea to help everyone in PCI environments with a mainframe!