Skip to Main Content
IBM Z Software


This portal is to open public enhancement requests against IBM Z Software products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Planned for future release
Created by Guest
Created on Oct 15, 2025

Enhancement the Cobl Kafak SDK by incorporating Client-Side Field Level Encryption (CSFLE).

Key Benefits of CSFLE
Enhanced Data Privacy and Security:

CSFLE encrypts and decrypts individual fields within data, ensuring that sensitive information is accessible only to authorized stakeholders.
Even if unauthorized users gain access to the data, they would only see encrypted values, which are meaningless without the corresponding decryption keys.
Targeted and Flexible Data Security:

Applications can selectively encrypt only the most sensitive fields, leaving other data in plaintext for operational efficiency.
Additionally, this approach supports the use of KSQL, enhancing flexibility in data processing.
Complete Access Control:

CSFLE ensures that only authorized users and applications can access sensitive data, even preventing plaintext access by administrators or other privileged users.
Cost Efficiency:

By eliminating the need to create multiple copies of data for access control, CSFLE reduces infrastructure and operational costs.
Regulatory Compliance:

CSFLE helps meet compliance requirements for protecting sensitive data and is particularly useful when sharing data
How CSFLE Works
Encryption and decryption processes occur on the client side. Sensitive data is encrypted before being stored or transmitted and decrypted only when accessed by authorized users, producers, or consumers. This ensures that sensitive information remains protected throughout its lifecycle.

The Open source C++ serdes library which supports CSFLE, is available here: https://github.com/confluentinc/libschemaregistry
 

Idea priority Urgent