Skip to Main Content
IBM Z Hardware and Operating Systems Ideas Portal


This is the public portal for all IBM Z Hardware and Operating System related offerings. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Not under consideration
Workspace z/OS
Categories RACF
Created by Guest
Created on Feb 28, 2025

Control passphrase strength and complexity, just like password strength and complexity is today.

We must enforce complexity rules for passphrase (i.e. : minimal length, pattern, ...etc...), just like we do for password. Some regulatory bodies compel us to do so in Banking industry.

The subparameter RULEn of SETROPTS PASSWORD command should apply to passphrase AS WELL, with a similar SETROPTS command.

Idea priority High
  • Guest
    Nov 19, 2025

    Strongly supported.

    An exit that is provided 'as is' from some internet source is not something an enterprise an implement in its environment. There are compliance reasons that prevent to use such programs. Also the exit is in assembler and calls the mentioned system rexx. There is also a growing lack of assembler skills in the enterprises, so using assembler is something that is something we want to avoid.

    As passwords are a somewhat outdated techonology and password phrases are the new standard (besides multifactor authentication), there should also be standard ways to set the rules (like character set, length, possibly different passphrase-requirements for different types of users).

  • Guest
    May 20, 2025
    This item is unlikely to be given high enough priority to be placed into the product plan.
  • Guest
    Apr 22, 2025
    To clarify, the current version shipped in SYS1.SAMPLIB and SYS1.LINKLIB is incompatible with the GitHub version. If we were to update the shipped version to the level of the GitHub version, it would gain this usability advantage.
  • Guest
    Apr 22, 2025
    Can you elaborate on your concerns with the performance of the exit? Would it help if we upgraded the SYS1.SAMPLIB version of IRRPHREX (and ICHPWX11) to the version on the GitHub downloads page? Note that the load module for the ICHPWX11 exit is shipped in SYS1.LINKLIB and can be installed by adding the member into LPALIB, detailed instructions can be found here: https://www.ibm.com/docs/en/zos/3.1.0?topic=ichpwx11-installing-exit-routine
  • Guest
    Mar 11, 2025
    Thank you for submitting this Idea. We would like some more details. What specific types of phrase complexity rules are you looking for? Is this sparked by compliance reasons? You mentioned ?This should be done without using exit ICHPWX11 for instance.? Does that also include the downloadable Rexx IRRPHREX exit, or would using that exit be satisfactory?