This portal is to open public enhancement requests for IBM Sterling products and services. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).
Shape the future of IBM!
We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:
Search existing ideas
Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updateson them if they matter to you. If you can't find what you are looking for,
Post your ideas
Post an idea.
Get feedback from the IBM team and other customers to refine your idea.
Follow the idea through the IBM Ideas process.
Specific links you will want to bookmark for future use
Passwordless connection to built-in local PostgreSQL
This enhancement should allow to use alternate access options to local PostgreSQL other than locally encrypted password to PostgreSQL user. Proposed solutions include: certificate-based authentication (preferred, if technically feasable) password ...
CIphers configuration for Connect Direct Web Services
Connect Direct Web Services configuration should allow to limit list of allowed ciphers. Similar functionality is present for protocol configuration under "server.ssl.enabled-protocols”. Support for similar parameter e.g. "server.ssl.enabled-ciphe...
CDW services should be running as non-system and non-admin user account
Our security assessment team found an issue with 'System' running CDW services by default. Although IBM allows a service account to run CDW services, it requires this account to be a member of local admin group. Either method causes security conce...
Provide control over who can use the SNODEID parameter
This idea was previously raised for CDz CONDIRECTZ-I-8, however, it was informed by CDz L3 that the enhancement in CDz will not be able to work on remote Distributed CD nodes. Therefore, this request is raised for similar function on distributed p...
In Connect:Direct v4.1 for Unix and v4.6 for Windows, we use the Cipher.txt file to limit the selection of cipher suites to strong ones so the spcli.sh "Display CipherSuites" command only shows what's allowed in the Cipher.txt file. This good secu...
Install agent is packaged with an older version of Java with numerous security vulnerabilities. Main java : $ ./jre/ibm-java-x86_64-80/jre/bin/java -version
java version "1.8.0_261"
Java(TM) SE Runtime Environment (build 18.104.22.168 - pxa6480sr6fp1...
Do not place IBM confidential, company confidential, or personal information into any field.