Skip to Main Content
IBM Sterling


This portal is to open public enhancement requests for IBM Sterling products and services. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Future consideration
Created by Guest
Created on Mar 28, 2023

Restrict Elliptic curves for SSL connection for Https/AS2 connectivity

Currently, there is no option to restrict or use only required Elliptic curves for the SSL connection for https/AS2 connectivity. 

For Example: Below are the Elliptic curves

secp192r1 – {1.2.840.10045.3.1.1} 

secp224r1 – {1.3.132.0.33} 

secp256r1 – {1.2.840.10045.3.1.7}

secp384r1 – {1.3.132.0.34}

secp521r1 – {1.3.132.0.35}

Suppose if we need to use secp384r1 – {1.3.132.0.34} and secp521r1 – {1.3.132.0.35} only, there is no option to use these curves only. Its better to have option to restrict the curves so that old elliptic curves can be removed and use only latest elliptic curves. Thus, provide more security to the connections.

  • Admin
    Manoj Panda
    Reply
    |
    May 3, 2023

    Dear Chandan,

    I am writing to provide an update regarding your Request for Enhancement (RFE) for "Restrict Elliptic curves for SSL connection for Https/AS2 connectivity" . We have received your request and are actively evaluating it to determine if it aligns with our product roadmap and if it is feasible to implement.

    We appreciate your interest in improving our product, and we understand how important this enhancement is to you. Our product development team is committed to providing the best possible experience for all of our customers, and we are carefully considering your request.

    We will continue to keep you informed about the status of your RFE and will provide updates as soon as they are available. If there is any additional information or context that you can provide to support your RFE, please let us know. We value your input and want to ensure that we fully understand your needs and expectations.

    Thank you for your patience and understanding as we review your RFE. We appreciate your feedback and your ongoing support of our product

  • Guest
    Reply
    |
    May 3, 2023

    Hi Manoj,

    secp384r1 and secp521r1 are the latest Elliptic curves which provide more security for the SSL connections than old curves. So, we want to use only these curves for the SSL connection and remove the other three curves.

    We have raised PMR TS012572702 and received response that SCBN doesn't have capability to configure only required Elliptic curves for the connection.

  • Admin
    Manoj Panda
    Reply
    |
    Apr 28, 2023

    Thank you for your recent Request for Enhancement (RFE). We appreciate your feedback and suggestions for improving our product/service.


    We understand the importance of listening to our customers and we take your feedback seriously. Our team will carefully review your suggestion and evaluate its feasibility.

    Could you please add the use cases and support tickets which will help us to to take this forward.

    We will keep you informed of any updates or progress regarding your RFE. While we cannot guarantee that every suggestion will be implemented, we value your input and will consider it as we continue to improve our product/service.

    Thank you again for taking the time to share your thoughts with us. If you have any further suggestions or feedback, please don’t hesitate to reach out.”