IBM Data and AI Ideas Portal for Customers


This portal is to open public enhancement requests against products and services offered by the IBM Data & AI organization. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:


Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,


Post your ideas

Post ideas and requests to enhance a product or service. Take a look at ideas others have posted and upvote them if they matter to you,

  1. Post an idea

  2. Upvote ideas that matter most to you

  3. Get feedback from the IBM team to refine your idea


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

IBM Employees should enter Ideas at https://ideas.ibm.com


ADD A NEW IDEA

Security

Showing 77 of 15428

Online SSL certificate renewal for Encryption at rest

SSL_KMIP_CLIENT_CERTIFICATE_LABEL change requires instance restart. Can we do this parameter as dynamic online update parameter without any outage to db2 instance.
over 6 years ago in Db2 / Security 0

DB2 LUW : Trusted contexts over IPC

There are many applications where application and DB is co-located in the same server. User impersonation via trusted contexts helps control the access of the database for individual users even though a common technical ID is seeded in application...
almost 2 years ago in Db2 / Security 1 Future consideration

Store auditing information directly in a table ( this option does not require files )

Allow DB2 to configure auditing to store auditing information in a table. Information could be retrieved using SELECT commands and there is no need to use system procedures or utilities like db2audit to extract information from files. The purpose ...
almost 5 years ago in Db2 / Security 1 Not under consideration

Marking range partitions in a table as readonly

Need feature at range-partition level granularity to mark it read-only so that no update/insert/delete can be performed on a particular range-partition. And by default (when not marked as readonly) all partitions carries table level permissions.Pe...
over 7 years ago in Db2 / Security 0 Not under consideration

Encrypted column support being deprecated, what else is available?

With DB2 LUW 11.1 the encrypt and decrypt, decrypt_char, decrypt_bin, etc functions are being deprecated. We already have all of the data encrypted on the disk with the disk subsystem so using an encrypted database does me no good. I need to be ab...
about 5 years ago in Db2 / Security 0 Not under consideration

Tool to check SSL certificate connectivity with KEYSECURE

Need some way to check if provided SSL certificate for secured connection to KEYSECURE is indeed valid before putting it in kmip cfg. This reduces the risk of any issues with SSL certificate on actual implementation day on production system.
over 6 years ago in Db2 / Security 0 Not under consideration

Allow creating allow/deny list of system calls possible by fenced external routines

This will secure the database further from malicious users trying to break out into the host running managed Db2 services on Cloud. This can be done using:1. seccomp() before spawning the db2fmp process and 2. Making more secure SELinux policies f...
over 1 year ago in Db2 / Security 0 Not under consideration

Db2 should allow binding its port 50000 on windows to localhost only.

Db2 currently doesn't allow binding its port 50000 on windows to localhost only, this port is left as open port and can be connected from other machines, unauthorized users can exploit this information to test vulnerabilities in the open service a...
over 4 years ago in Db2 / Security 2 Functionality already exists

Oracel "select any table" feature in DB2

Customer need a read only user to do the extract in the data warehouse project or to do the monitor. With the 'select any table' privilege ， after customer create some new table,that user only have the read only privilege on those new tables.
almost 6 years ago in Db2 / Security 1 Functionality already exists

Modify permissions on DB2/LUW installation directories

During installation and instance creation of DB2/LUW ESE (and AESE), the following directories are create as world writable (OTHER permissions of 777) without the sticky bit set: sqllib/db2dump/DIAG0000 sqllib/db2dump/events sqllib/tmp sqllib/uif ...
about 9 years ago in Db2 / Security 0 Not under consideration

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.