Skip to Main Content
IBM Sterling


This portal is to open public enhancement requests for IBM Sterling products and services. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

Pinned ideas

PINNED Present Multiple Host Keys - RSA and ECDSA
As with standard Linux servers today Secure Proxy should be able to present Host Keys (more than one) in both RSA and ECDSA formats depending on what type the vendor incoming connection supports. Vendors are demanding Host Keys that are stronger t...
PINNED Add support to controllerWorkflow script to restart BPs that are in "completed, error" state by individual BP IDs
During system issues, we are unable to bulk restart the BP IDs at a time. This is causing huge support effort in the clean-up process. Existing controllerWorkflow.sh script doesn't have a solution to restart the BPIDs that are in "completed, error...

All ideas

Showing 47

Cryptographic function used for TLS certificates storage should use SHA-384 or SHA-512 or POLY-1305

CA Certificates, Key Certificates and Private Keys are stored in key database file cdkeystore.kdb + STH file. In addition software stores the key database password in .keystore file and passphrase to the private key in .password file in C:\Program...
3 months ago in Sterling Connect:Direct / Security 1 Under review

Can you please have the sterling b2b map editor tested and certified for win11 pro.

win11 is here. this has to happen and i am hoping it will be sooner rather than later.
4 months ago in Sterling B2B Integrator / Mapping & Translation 1 Under review

Export users details, permissions, paths configured, folder permissions in a one consolidated sheet in IBM Sterling Filegateway

Exporting users details like username, surname, email, permissions, file system paths configured in FS virtual root, adapter level permissions, folder level permissions in a one consolidated sheet for the use of security teams/ CISO teams to valid...
6 months ago in Sterling File Gateway 0 Under review

Enablement of SSH Certificates

Sterling B2B leverages SSH Keys for SFTP file transfers and OpenSSH to faciliate this. I would like to see it enable the ability to use SSH Certificates. SSH Certificates provide significant increase in security as opposed to SSH keys.
6 months ago in Sterling File Gateway / Security 3 Under review

HA Connectivity for Sterling Integrator to Oracle Database and Support Multiple scan address for RACs Scan

Hi Team, We would like to have a feature in sterling integrator to support HA connectivity when connect to oracle Database and also to support multiple scan address for RACs scan. Currently in sterling application we have configured the jdbc conne...
8 months ago in Sterling B2B Integrator / Administration & Configuration 0 Under review

Update or Modification of Partner Configuration to the existing role out if incase of any failure

We are having issue deleting the partner ID from PEM.Below are the details:After completing the onboarding process, both PartnerName and PartnerId are generated and recorded in the Partner Information task. If a system failure occurs during the in...
8 months ago in Sterling Partner Engagement Manager / Onboarding 1 Under review

Refresh Token provided in HTTP Headers

Current situation: The OpenID Connect refresh token is sent as a GET parameter to the webservers of pem-pp and pem-pr applications so the refresh token is showed in the URL history of the browser/sniffer traffic: Example: GET/rochesso/home?refresh...
10 months ago in Sterling Partner Engagement Manager / Security 0 Under review

Use Refresh token rotation to make Jwt token more secure

Current Situation: An access token allows temporary access to restricted resources, PEM APIs, and so has a short validity period of 5 minutes (configurable through system properties). A refresh token has a longer validity as it allows users to log...
10 months ago in Sterling Partner Engagement Manager / Security 0 Under review

Check file upload content with magic bytes

At current situation a malicious user can bypass the file type restrictions for logos in pem-pp application. It is possible to bypass the upload restrictions and upload a disallowed file by changing the file Content-Type to an allowed one. The ser...
10 months ago in Sterling Partner Engagement Manager / Security 0 Under review

Strip LDAP syntax from SEAS return data and return just the values

PEM/PCM requires each user to have a “role”. When LDAP is integrated with PCM, the “role” is obtained as a mapping from an LDAP attribute value. Enterprise customers with an enterprise Microsoft Active Directory schema can be constrained from usin...
10 months ago in Sterling Partner Engagement Manager / Permission/Roles 0 Under review