IBM System Storage Ideas Portal


This portal is to open public enhancement requests against IBM System Storage products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Add a new idea Subscribe
Status Not under consideration
Workspace IBM Copy Services Manager (CSM)
Created by Guest
Created on Sep 11, 2025

RELATED IDEAS

Extend CSM RESTful API for zos certificate import to work with multiple CSM z/OS connections for different consistency groups

The current REST API to update a zos certificate into CSM does not allow filtering of z/OS connections if CSM has multiple z/OS connections to different consistency groups.

The Swagger doc for this API does not have any parameter input or filter to select the CSM to z/OS connection for the certificate to be imported. This API works for a single CSM with a single z/OS connection but does not work for a single CSM with multiple z/OS connections.

POST /storagedevices/zoscert

Example:

curl -X POST -k -H 'Accept-Language: en-US' -H 'Content-Type: multipart/form-data' -H 'Authorization: Basic Y3NtYWRtaW46Y3Nt' -i https://localhost:9559/CSM/web/storagedevices/zoscert --form 'file=@"ziJziJeMk/csm.cert234

IBM Documentation - IBM Documentation

zOS CSM Connect...
zOS CSM Connections.docx
 zOS CSM Connections.docx
Open full size
zOS CSM Connections.docx
Idea priority Medium
  • Guest
    Sep 19, 2025
    Thank you for the info. When you want to modify the certificate for a z host connection that has already been created, you do NOT need to delete nor readd the cert. Simply call the POST /storagedevices/zoscert call. If you call the PUT for zoshost then yes you'll see the "already added" error.

    CSM never "breaks" the connection to a z host except on a restart of the server. So if you did not see the new cert active it is likely because that connection has already done the SSL validation and handshake. After you restart the CSM server or the connection is lost and automatically reconnects.....then you should hopefully see the new certificate in place. If not then please open a case.

    Hope that answers the questions.
    1 reply
  • Guest
    Sep 11, 2025
    The REST interface for adding/updating the certificates for z/OS connections already supports handling this for multiple z/OS Connections.

    Adding a z/OS connection and adding the certificates have been split into two different methods. When adding a secure connection via REST you first need to call the POST /storagedevices/zoscert method passing in the cert file. When calling this, there is no reference to the host it will be connecting to. This file is added to the trust store on the server. Then you call the PUT /storagedevices/zoshost method passing in the connection info to the zOS host.

    If adding more than one z/OS host connection, the process is the same. First call the POST /storagedevices/zoscert and then the PUT /storagedevices/zoshost. The new cert passesd in will be appended to the trust store.

    When modifying zos certs simply call the POST /storagedevices/zoscert.

    If this still does not meet your requirements please let us know what you would like to see to help with your needs.
    1 reply

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.