IBM i 7.6: Native Security, Database Evolution, and Power11 Readiness

IBM i 7.6, released on 18 April 2025, represents a significant advancement in the IBM i operating system. As enterprise workloads become more security-conscious and compliance-driven, IBM i 7.6 delivers core platform enhancements that meet modern demands without compromising the OS’s legendary stability or integration.

This release targets users running on IBM Power10 and Power11 servers and continues IBM’s three-year release cadence. It offers substantial improvements across security, database services, hardware support, and compliance tooling, making it an essential consideration for IBM i clients aiming to stay secure, current, and performant.

Native Multi-Factor Authentication (MFA)

One of the standout features in IBM i 7.6 is native Multi-Factor Authentication (MFA). Built directly into the OS, this eliminates the need for external agents or network dependencies, supporting MFA in offline scenarios such as:

• Green screen (5250) login
• IBM Navigator and Navigator for i
• Digital Certificate Manager (DCM)
• System Service Tools (SST) and Dedicated Service Tools (DST)

It uses Time-Based One-Time Passwords (TOTP), enabling secure authentication while simplifying implementation and ongoing management.

ASP 1 Encryption

Security improvements extend to storage with ASP 1 encryption. This enables encryption of the System ASP (SYSBAS), protecting data at rest and helping organisations meet stringent internal and external compliance requirements. Previously, encryption was limited to user ASPs - this closes a critical gap in system security.

Advanced Cryptography & Compliance

IBM i 7.6 strengthens its cryptographic foundations with updates that align with modern security standards, including:

• Support for PBKDF-2 and ECC/SHA-3 algorithms
• Secure Boot enhancements
• Password Key Store (PKS) support for CHAP authentication
• NVMe password enforcement for sensitive storage environments

These additions support compliance with frameworks such as GDPR, HIPAA, and other regulated industry standards.

Db2 for i Enhancements

IBM i’s integrated database, Db2 for i, continues its evolution as a robust, enterprise-grade data platform. Key enhancements include:

• FINAL TABLE support for UPDATE and DELETE operations, allowing more efficient data auditing and rollback handling
• New IBM i Services, such as SQLSTATE_INFO, for improved diagnostic capability
• Enhanced plan cache filtering for better performance tuning
• BLOB viewing and editing directly via Access Client Solutions
• Data-change-table-reference support for historical tracking of row changes

These updates enable developers and database administrators to deliver higher-performance applications with increased visibility and control.

Migrate While Active & System Management Updates

Migration and HA/DR tooling also sees improvements:

• Migrate While Active (MWA) now uses RSYNC, optimising data and media transfer during migrations
• The Db2 Mirror GUI has been modernised for improved usability
• IBM Navigator for i and Access Client Solutions (ACS) are updated to support native MFA and improve certificate handling workflows
• Digital Certificate Manager (DCM) gains improved TLS certificate chain management and audit capabilities

These enhancements are aimed at reducing the complexity of managing secure, always-on IBM i environments.

Platform Support and Hardware Compatibility

IBM i 7.6 supports the latest generation of IBM Power Systems, including:

• Power E1180
• Power S1124, S1122
• Power L1124, L1122

Alongside this, the release introduces support for advanced I/O and cryptographic hardware such as:

• PCIe5 200 GbE adapters
• NVMe hot spare configuration and password enforcement
• Fibre Channel performance stats
• Dynamic Ethernet link aggregation
• Hardware-accelerated data compression (zlibNX in PASE)

This ensures the platform is optimised for both modern workloads and future infrastructure scaling.

Licensing, Lifecycle & Roadmap

IBM i 7.6 supports subscription licensing, giving organisations greater budget predictability while reducing technical debt. The release will benefit from IBM’s typical support model:

• 3 years of standard support
• 4 years of extended support
• Up to 3 additional years under IBM's advanced extended support programme

Organisations can confidently plan deployments knowing IBM i 7.6 will be supported into the mid-2030s.

Summary for IT Leaders

IBM i 7.6 delivers value in three core areas:

1. Stronger Security – Native MFA, encryption at rest, and modern cryptographic APIs reinforce IBM i’s position as a secure enterprise platform.
2. Operational Efficiency – Db2 and system management improvements reduce overhead, improve auditability, and enable better automation.
3. Platform Longevity – Power11 readiness and hardware expansion options ensure customers can scale confidently over the next decade.

For organisations already running Power10 or planning a move to Power11, IBM i 7.6 offers a compelling reason to stay current and secure.