Skip to Main Content
IBM Data and AI Ideas Portal for Customers


This portal is to open public enhancement requests against products and services offered by the IBM Data & AI organization. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:


Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,


Post your ideas

Post ideas and requests to enhance a product or service. Take a look at ideas others have posted and upvote them if they matter to you,

  1. Post an idea

  2. Upvote ideas that matter most to you

  3. Get feedback from the IBM team to refine your idea


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

IBM Employees should enter Ideas at https://ideas.ibm.com


ADD A NEW IDEA

My votes: Security

Showing 73 of 14434

Provide support in Db2 native encryption for KMIP 1.2 or higher

DB2 native encryption currently supports KMIP 1.1 where the master key flows (in a secure communication channel) from the centralized keystore to Db2 in order to decrypt the data encryption key. Later versions of KMIP support an alternate approach...
almost 6 years ago in Db2 / Security 0 Not under consideration

Provide certificate based authentication

We'd like to see certificate based authentication being offered for DB2 LUW and DSM.
almost 6 years ago in Db2 / Security 0 Not under consideration

SSL Password authentication with KMIP protocol

KMIP 1.1 does not support CN+password authentication in SSL connectivity with KEYSECURE. As of now ONLY CN (hostname) is handshanked to established connectivity with KEYSECURE.
almost 6 years ago in Db2 / Security 0 Not under consideration

remove all world writable permissions on files and directorys see also 79173

Our Security does not want to see files and directorys which have the world writeable permission set se also fea 79173 PMR is case TS000140222
about 6 years ago in Db2 / Security 0 Not under consideration

Key rotation of DEK

Facility to rotate DEK in addition to rotation of DMK. Currently db2 does support master key rotation however for banking regulations there is need of facility to rotate the DEK as well.
about 6 years ago in Db2 / Security 0 Not under consideration

Allow unencrypted password in an SSL conversation

This is a request to align the behavior of DB2 LUW with that of IBM i and DB2 for z/OS when connecting with a DRDA client. With the other 2 platforms, if DRDA is configured to require user/password to be sent encrypted with minimum encryption leve...
about 6 years ago in Db2 / Security 0 Not under consideration

Tool to check SSL certificate connectivity with KEYSECURE

Need some way to check if provided SSL certificate for secured connection to KEYSECURE is indeed valid before putting it in kmip cfg. This reduces the risk of any issues with SSL certificate on actual implementation day on production system.
about 6 years ago in Db2 / Security 0 Not under consideration

Online SSL certificate renewal for Encryption at rest

SSL_KMIP_CLIENT_CERTIFICATE_LABEL change requires instance restart. Can we do this parameter as dynamic online update parameter without any outage to db2 instance.
about 6 years ago in Db2 / Security 0 Not under consideration

CLONE_SERVER_HOST is the READ ONLY in db2 native encryption with KMIP

The CLONE_SERVER_HOST keysecure server defined in kmip cfg is the READ ONLY server which fails create encrypted database and SHOW MASTER KEY DETAILS commands. Also it is not 100% failover compatible.
about 6 years ago in Db2 / Security 0 Not under consideration

Restore with SHOW MASTER KEY DETAILS requires db entry in list db drirectory

To know master key details, SHOW MASTER KEY DETAILS require db entry in list db directory otherwise it creates new entry. To get the details from backup image on production system - requires prod db to be down which is not feasible.
about 6 years ago in Db2 / Security 0 Not under consideration