Skip to Main Content
IBM Sterling


This portal is to open public enhancement requests for IBM Sterling products and services. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Not under consideration
Created by Guest
Created on May 20, 2025

Connect Direct File Agent 1.4.0.3-SterlingConnectDirectFileAgent-iFix012 upgrade on Window 2012 upgrade failing when userID is already a part of Admin group

Being a part of admin group, user was not able to upgrade while trying to upgrade CDFA 1.4.0.3 iFix012. Now suggestion is to add this User as a designated admin user of window box. This addition of user as admin is not allowed because this practice is not company security policy compliant.

What is your industry? Financial Markets
How will this idea be used?

As per company security policy, userID are part of admin group and they could be able to install the application. But now 1.4.0.3-SterlingConnectDirectFileAgent-iFix012 upgrade on Window 2012 is failing while upgrade.

  • Admin
    James Joseph
    Oct 6, 2025

    The issue with the 3rd-party software has been documented in a technote, providing a solution and a workaround (SFA 1.4.0.5 or later).

    JVM Security Error Encountered When Installing IBM Sterling Connect:Direct File Agent on Windows

  • Admin
    James Joseph
    Oct 6, 2025

    Security Fix provided by the Vendor

    If the Windows installer/uninstaller is launched as an administrator pointing to a JVM location which is an unsecure/non-admin user folder, then installer/uninstaller will exit. The JVMs in the non-admin user folders will not be permitted to be used and will be restricted with security error message.

    How this applies to Standalone File Agent

    When a user launches the Standalone File Agent Windows installer, it first extracts the bundled JVM into a temporary location beneath the user's %TMP% directory. Next, it launches the JVM from there to start the actual installation process. Typically, the temporary JVM location inherits permissions from its parent, like %TMP%.

    The problem arises when the %TMP% directory has Write permission granted to the Users group, which it normally should not have, and which exposes a security risk. In this case, the Windows installer considers the JVM location to be unsecure for an administrator, shows the security error message and exits.

    Solution

    Remove Write access for the Users group from the %TMP% directory when running the installer as administrator.

  • Admin
    James Joseph
    May 28, 2025

    Thank you for taking the time to share your ideas to IBM. We truly value our relationship with you and appreciate your efforts and willingness to share details about your experience, your recommendations, and ideas. We will soon review the same in the coming weeks and shall get back with a response.

    Thanks,

    James