Skip to Main Content
Digital Business Automation Ideas


This is an IBM Automation portal for Digital Business Automation products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Please use the following category to raise ideas for these offerings for all environments (traditional on premises, containers, on cloud):
  • Cloud Pak for Business Automation - including Business Automation Studio and App Designer, Business Automation Insights

  • Business Automation Workflow (BAW) - including BAW, Business Process Manager, Workstream Services, Business Performance Center, Advanced Case Management

  • Content Services - FileNet Content Manager

  • Content Services - Content Manager OnDemand

  • Content Services - Daeja Virtual Viewer

  • Content Services - Navigator

  • Content Services - Content Collector for Email, Sharepoint, Files

  • Content Services - Content Collector for SAP

  • Content Services - Enterprise Records

  • Content Services - Content Manager (CM8)

  • Datacap

  • Automation Document Processing

  • Automation Decision Services (ADS)

  • Operational Decision Manager

  • Robotic Process Automation

  • Robotic Process Automation with Automation Anywhere

  • Blueworks Live

  • Business Automation Manager Open Edition

  • IBM Process Mining


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.


Status Under review
Created by Guest
Created on Jul 24, 2026

CP4BA / WfPS Dependency on Broad Wildcard Certificates – Request for Supported Alternatives

We understand that certain IBM CloudPak components may benefit from the use of wildcard certificates such as *.svc.cluster.local and *.api to simplify certificate management for dynamically created services and routes. However, our organization's security and architecture standards do not permit the use of broad wildcard certificates within Kubernetes/OpenShift environments.

The primary concern is that wildcard certificates could potentially be used to match identities beyond the intended application scope. While CloudPak workloads may require flexibility for internal service communication, our security team has determined that allowing such certificates introduces an unacceptable level of risk and creates a precedent that cannot be effectively restricted to specific clusters or business applications. As a result, approval for these wildcard certificates cannot be obtained within our organization.

This limitation is currently impacting our ability to implement the solution in a manner that remains fully compliant with internal security controls and governance requirements. T

We would appreciate IBM's recommendation for an alternative certificate management strategy, compensating control, or product-supported configuration that provides equivalent functionality without requiring wildcard certificates that violate our organizational policies.

Our goal is to deploy and operate the platform in a secure, compliant, and vendor-supported manner. We request your guidance on an acceptable alternative solution.

This RFE is for CP4BA WFPS and separate RFE will be opened for CPFS

Idea priority Urgent
  • Guest
    Jul 24, 2026

    This enhancement is critical for large regulated enterprises that prohibit broad wildcard certificates due to security and compliance requirements. Providing a supported alternative would enable wider adoption of CP4BA while allowing organizations to remain compliant with their internal security standards.

    Support for non-wildcard certificate deployment models would significantly improve security posture and governance compliance. Many enterprises cannot obtain approvals for cluster-wide wildcard certificates, making this a key adoption blocker.