IBM Sterling


This portal is to open public enhancement requests for IBM Sterling products and services. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

Clear

Security

Add CU user role feature for HSM integration.

Using the Crypto User (CU) role improves HSM security by following the least-privilege principle. SI would use a lower-privileged account for normal cryptographic operations instead of the Crypto Officer role, which can create, modify, and delete ...
3 days ago in Sterling B2B Integrator / Security Submitted

B2Bi authentication against MS SQL Server DB using Asure Managed Identity or via a MS EntraID

B2Bi currently relies on username-password authentication for backend SQL database connectivity resulting in the continued use of static credentials. Requesting that B2Bi authenticates against the MS SQL Server DB using Asure Managed Identity or v...
3 days ago in Sterling B2B Integrator / Security Under review

External Key Vault configuration

Background & Customer Context: Enterprise clients running or planning to run containerized IBM Sterling workloads on Kubernetes/OpenShift (such as Bradesco) can be required by corporate governance to centralize credentials in external vaults (...
2 months ago in Sterling B2B Integrator / Security Submitted

DB Password to be fetched from Password Safe like HarshiCorp

Sterling Integrator should retrieve the database password dynamically from a credential vault solution such as HashiCorp Vault or CyberArk. Password rotation performed in the vault should be transparent to the application, without requiring servic...
about 2 months ago in Sterling B2B Integrator / Security Submitted

Post-Quantum Cryptography (PQC) Support in Sterling B2B Integrator

Quantum computing presents a significant long-term risk to several widely deployed cryptographic algorithms currently used to protect data in transit, including RSA, ECDHE, and DHE, which form the foundation of modern TLS implementations. The imme...
about 1 month ago in Sterling B2B Integrator / Security Under review

Prevent Plaintext Passwords from Being Written to Upgrade and Installation Logs During Re-Encryption

During in-place upgrades of IBM Sterling B2B Integrator (for example, upgrading from 6.0.3 or 6.1.1 to 6.2.2), the upgrade process decrypts legacy credentials and re-encrypts them using newer encryption algorithms. As part of this process, the ins...
about 1 month ago in Sterling B2B Integrator / Security Submitted

Disable SI SFTP server negotiating the legacy ssh-rsa algorithm along with the stronger rsa-sha2-512 and rsa-sha2-256 host key algorithms

host key algorithm "ssh-rsa" is SHA1 deprecated for SSH when sftp server adapter is configured with RSA host key of 2048 SHA256. As discussed in cases TS022780968, TS021261504 and TS019741908. With host key ssh-rsa of 2048 bit generated and config...
about 2 months ago in Sterling B2B Integrator / Security Submitted

Multi-Factor Authentication for Sterling Integrator 6.x

Requesting Multi-Factor Authentication (MFA) for Sterling Integrator 6.x Dashboard console log in. Currently, the application allows to create account locally or integrated with AD. Requesting MFA to add another layer of security and authentication.
about 2 years ago in Sterling B2B Integrator / Security Future consideration

Introduce a native capability in IBM Sterling B2B Integrator to consistently capture and expose real client source IP addresses for both internal and external connections across all protocols, without dependency on SEAS.

Why is it useful? Enables accurate identification of source systems for all file transfers and connections Improves incident troubleshooting and root cause analysis (RCA) Strengthens audit, compliance, and KYC controls by maintaining IP-level trac...
4 months ago in Sterling B2B Integrator / Security Submitted

Enable Role-Based Access Control (RBAC) via Active Directory Integration for Sterling B2Bi/SFG

Currently, Sterling B2Bi/SFG relies on local group configurations for role-based access control (RBAC), which creates operational overhead and limits centralized governance. We propose introducing native integration with Active Directory (AD) to m...
11 months ago in Sterling B2B Integrator / Security Submitted

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.