Skip to Main Content
ADD A NEW IDEA

Security

Showing 28

Control Center needs the ability to pull account passwords from a corporate password manager/vault

Due to security requirements and best practices, passwords should be changed periodically and wherever possible, should not be stored on local systems in text/XML files, etc. Control Center should have an option to utilize external Password Vault ...
over 3 years ago in Sterling Control Center Monitor / Security 1 Planned for future release

AD/LDAP authentication in ICC

Currently we are required to use SEAS for LDAP authentication. However, using SEAS as any tool will add more resources to the worker pool. While deploying SEAS does not require a license, there is a cost involved in adding CPU and memory to SEAS P...
about 2 months ago in Sterling Control Center Monitor / Security 0 Under review

Security Vulnerability Password in Plain text

We have identified a security vulnerability regarding passwords being stored in plain text in the application.Despite the solution provided by IBM not being accepted by the application support team, they have recommended raising an RFE case. ...
about 2 months ago in Sterling Control Center Monitor / Security 0 Under review

Allow ICC to authenticate users via group membership (eg. using SEAS)

Typical enterprises do not define individual user accounts and groups to every application, as is currently required for ICC.Instead, user accounts and groups within an LDAP directory (such as Active Directory) are used and the applications recogn...
over 5 years ago in Sterling Control Center Monitor / Security 1 Future consideration

Control Center Certificate Expiration Warning Notification

The Certificate Expiration warning rule that comes with Control Center produces a warning if a Connect Direct Secure Plus certificate is going to expire within 60 days. However, there is no known notification for Control Center's certificate which...
over 3 years ago in Sterling Control Center Monitor / Security 8 Functionality already exists

Hooks to enable the SSO Authentication for ICC Web Console URL

No description provided
about 6 years ago in Sterling Control Center Monitor / Security 1 Planned for future release

I would like to see control center monitor use active directory as an authenticator vs just SQL authentication when connecting to a MSSQL database

For security reasons we don't use SQL Authentication for local accounts. We use domain service accounts. We would like to see the CC adopt this option for authentication.
about 1 year ago in Sterling Control Center Monitor / Security 1 Not under consideration

Disable concurrent user login in SCC

As per Bank security team, Concurrent logins should not be allowed. If the user is login via different machines or different browsers then the old session should be destroyed. As per them, we need to have this feature in the product or commitment ...
over 1 year ago in Sterling Control Center Monitor / Security 2 Planned for future release

LDAP integration with Sterling Control Center

Sterling Control Center should be able to interface directly with LDAP to authenticate without the addition of Sterling External Authentication Server.
over 6 years ago in Sterling Control Center Monitor / Security 3 Not under consideration

IBM Control Center Support AD windows authentication method for SQL server database

To meet Industry security standards to authenticate to Enterprise Active Directory tool
over 4 years ago in Sterling Control Center Monitor / Security 1 Not under consideration