Skip to Main Content
IBM System Storage Ideas Portal


This portal is to open public enhancement requests against IBM System Storage products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Delivered
Created by Guest
Created on Apr 20, 2026

CSM allows the use of multiple cryptographic TLS protocols

CSM can actually only select one version of TLS in the configuration member.

Parameter of Configuration member csmServer:

protocol=TLSv1.2

In order to simplify management and enable error-free migration to TLS v1.3 across different LPARs, we are requesting this change.

Example of error:

ÝERROR ¨ CWWKO0801E: The SSL connection cannot be initialized from the 10.186.xxx.xxx host and 38,xxx port on the local server. Exception: javax.net.ssl.SSLHandshakeException: The client supported protocol versions ÝTLSv1.3¨ are not accepted by server preferences ÝTLSv1.2¨

.at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:130)

Idea priority Medium
  • Guest
    Jun 29, 2026
    Delivered in CSM 6.3.18 release.
  • Guest
    Jun 3, 2026

    Before open a IDEA I opened the case " TS021763715 CSM and TLSV1.3".

     

    This message appears in the output of csmServer(address space in z/os).

    We have the following preferred protocol configured:

     BROWSE    /ucat/lpp/CSM63/wlp/usr/servers/csmServe
    Command ===>                                      
    ********************************* Top of Data *****
    #                                                  
    # ZOS ESS API Client side configuration            
    #                                                  
    truststore=etc/zosTrust.jks                        
    protocol=TLSv1.2                                   

     

     

     


     

  • Guest
    May 15, 2026
    Can you provide more information on what you're looking for? So the CSM server itself can setup an ssl_protocol in the bootstrap.properties. This is the protocol the CSM server is requiring for communication into the server. But sounds like CSM is the client in the example you gave? Are you talking about the CSM connection from the CSM server to the z/OS system? In that case, the setup is done at the system level. The server defines the protocol level and the client negotiates to that level. The CSM server's client to z should support TLS 1.3. But the error you're hitting seems to imply the server wasn't setup for tls 1.3. Is there a case that you opened that references this issue? I think I need to understand more of what you're looking for. CSM uses Java to manage TLS connections. This can all be changed via property file on the server side...but the z system side is all z/OS functionality.