Skip to Main Content
IBM Sterling


This portal is to open public enhancement requests for IBM Sterling products and services. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

My ideas: Security

Showing 27

Control Center needs the ability to pull account passwords from a corporate password manager/vault

Due to security requirements and best practices, passwords should be changed periodically and wherever possible, should not be stored on local systems in text/XML files, etc. Control Center should have an option to utilize external Password Vault ...
over 3 years ago in Sterling Control Center Monitor / Security 1

AD/LDAP authentication in ICC

Currently we are required to use SEAS for LDAP authentication. However, using SEAS as any tool will add more resources to the worker pool. While deploying SEAS does not require a license, there is a cost involved in adding CPU and memory to SEAS P...
5 months ago in Sterling Control Center Monitor / Security 0 Under review

Windows authentication (instead of SQL authentication) for connection to the database

This is a security standard for the Windows platform. Similar to idea SFG-I-324, for Sterling File Gateway, clients are asking about the Windows authentication between CCM/D and the database. Not have this option might be a roadblock for some clie...
2 months ago in Sterling Control Center Monitor / Security 0 Under review

Allow ICC to authenticate users via group membership (eg. using SEAS)

Typical enterprises do not define individual user accounts and groups to every application, as is currently required for ICC.Instead, user accounts and groups within an LDAP directory (such as Active Directory) are used and the applications recogn...
over 5 years ago in Sterling Control Center Monitor / Security 1 Future consideration

Control Center Certificate Expiration Warning Notification

The Certificate Expiration warning rule that comes with Control Center produces a warning if a Connect Direct Secure Plus certificate is going to expire within 60 days. However, there is no known notification for Control Center's certificate which...
over 3 years ago in Sterling Control Center Monitor / Security 8 Functionality already exists

Security Vulnerability Password in Plain text

We have identified a security vulnerability regarding passwords being stored in plain text in the application.Despite the solution provided by IBM not being accepted by the application support team, they have recommended raising an RFE case. ...
5 months ago in Sterling Control Center Monitor / Security 0 Under review

I would like to see control center monitor use active directory as an authenticator vs just SQL authentication when connecting to a MSSQL database

For security reasons we don't use SQL Authentication for local accounts. We use domain service accounts. We would like to see the CC adopt this option for authentication.
over 1 year ago in Sterling Control Center Monitor / Security 1 Not under consideration

LDAP integration with Sterling Control Center

Sterling Control Center should be able to interface directly with LDAP to authenticate without the addition of Sterling External Authentication Server.
almost 7 years ago in Sterling Control Center Monitor / Security 3 Not under consideration

Disable concurrent user login in SCC

As per Bank security team, Concurrent logins should not be allowed. If the user is login via different machines or different browsers then the old session should be destroyed. As per them, we need to have this feature in the product or commitment ...
almost 2 years ago in Sterling Control Center Monitor / Security 2 Planned for future release

IBM Control Center Support AD windows authentication method for SQL server database

To meet Industry security standards to authenticate to Enterprise Active Directory tool
over 4 years ago in Sterling Control Center Monitor / Security 1 Not under consideration