IBM is introducing IBM zSecure Secret Manager, a new capability designed to streamline certificate lifecycle management on IBM Z—with integration into enterprise secrets platforms like IBM Vault Self-Managed for Z and LinuxONE.

Available 19 June 2026, IBM zSecure Secret Manager enables organizations to move from manual, fragmented certificate processes to policy-driven automation of certificate renewal to reduce operational overhead

Certificates are critical to securing systems and ensuring trust, and without a reliable renewal process, organizations face heightened risk of service outages and the growing operational burden of manual certificate management.

Across the enterprise, organizations are standardizing on centralized secrets management platforms to manage credentials, keys and certificates. Enterprise Secrets platforms like IBM Vault Self-Managed for Z and LinuxONE provide a system of record for secrets, enabling secure issuance, storage and lifecycle control across applications and environments.

However, in many IBM z/OS environments, certificate lifecycle management still relies on manual, application-specific processes: