Skip to Main Content
IBM Z Software


This portal is to open public enhancement requests against IBM Z Software products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

ADD A NEW IDEA

My ideas: Enterprise Key Management Foundation

Showing 26

CATTool should Provide Date of Master Key Changes

As part of the Crypto Card or KDS Db2 tables, The CATTool should provide the date that the MKVP value was first stored in the KDS or the date that the MVKP value was changed in the KDS as a result of reencipher. This support was recently provided ...
4 months ago in Enterprise Key Management Foundation / Other 0 Under review

UKO-Agent should have his own Messages in zOS SYSLOG

We have the need to control and automate messages from the UKO agent. So if something changes in a Key Dataset (e.g. CKDS) with UKO, we need to be able to react from zOS. Actually, the only way to be aware of changes there is to analyse SMF data. ...
about 1 month ago in Enterprise Key Management Foundation / UKO for z/OS 1 Under review

Enterprise Key Inventory and Reporting

Add Enterprise Key Inventory and Reporting functionality to EKMF. This will help to remove the need for a manual key inventory that organisations often manage in spreadsheets and to automate the maintenance and reporting operations, thereby removi...
over 1 year ago in Enterprise Key Management Foundation / EKMF Web 2 Future consideration

UKO Certificate Management

As a Key Manager I can view and manage certificates within UKO Key Management Use Cases: Generating private/public key pairs Generating CSRs Importing certificates from a CA Distributing keys and certificates (including the chain to a root) to HPC...
10 months ago in Enterprise Key Management Foundation / EKMF Workstation / UKO for z/OS 0 Future consideration

UKO: /ukebase/server.xml improvments

It would be easier to have the same timestamp in each log (joblog, syslog, messages.log, trace.log). Currently our zOS logs are in local time and the GUI logs are in UTC. Please add a variable to server.xml in /ukobase to set a timezone Another go...
4 months ago in Enterprise Key Management Foundation / UKO for z/OS 0 Under review

Dual Control for key management actions (n/Auth)

A method for dual control is needed in EKMF Web, such that any action (request), for which dual control is required, requires two (or more) users to confirm the request before EKMF Web performs the action. These actions can be (but not limited to)...
almost 2 years ago in Enterprise Key Management Foundation / UKO for z/OS 2 Planned for future release

Consistent date format for display of dates in tables and filter criteria

The display of dates should be consistent across the UKO UI. - The dates displayed in UKO when listing keys and key templates are shown in ISO format YYYY/MM/DD. - The filter criteria for dates for keys and key templates are display in US format M...
8 months ago in Enterprise Key Management Foundation / UKO for z/OS 0 Future consideration

Provide AT-TLS Support for EKMF Web

A recent pen test by IBM XForce performed on our z/OS systems identified a vulnerability where the TCP port used by EKMF was not using https. In attempting to remediate this condition it was discovered that secure https browser access to EKMF-Web ...
over 1 year ago in Enterprise Key Management Foundation / EKMF Web 3 Functionality already exists

QRadar/SIEM integration

EKMF Web must generate security related events that can be consumed by IBM QRadar similar third-party SIEM systems. At minimum, these events must include- Logons, both success and failure- logoffs, when performed by a user, logoffs due to timout m...
almost 2 years ago in Enterprise Key Management Foundation / EKMF Web 1 Future consideration

GUI usability improvements for UKO

We need to provide the UKO authorisation roles to a group of users with little knowledge of key management. They need a tool that is easy and intuitive to use. So the GUI needs to be clearer. I think it would be very useful if users of the UKO GUI...
6 months ago in Enterprise Key Management Foundation / UKO for z/OS 0 Future consideration