An audit that opened at full capacity PVU closed for a fraction of the claim. The ILMT rebuild, the entitlement baseline, and the moves that did it.
A UK mining group faced an IBM audit claim anchored at full capacity PVU. ILMT remediation and a sub capacity defense closed it for a fraction of the opening number.
IBM audited the group because its virtualized Db2 and WebSphere estate had grown for years without consistent ILMT reporting, which is exactly the profile the publisher targets. The estate spanned IBM Db2, WebSphere, and Maximo across UK operations with roughly fifteen thousand employees.
IBM's sub capacity licensing terms make eligibility conditional: deploy and maintain ILMT, retain quarterly reports, or default to full capacity licensing of every physical core under the virtualization layer.
The audit data showed a compliant runtime footprint hidden under a reporting failure, not real overdeployment. Rebuilding the deployment picture from hypervisor data and ILMT scans cut the licensable base dramatically.
Opening claim versus defended position by product
| Claim area | Auditor position | Defended position |
|---|---|---|
| Db2 on VMware clusters | Full capacity PVU on all hosts | Sub capacity PVU on allocated vCPU |
| WebSphere estate | Network Deployment everywhere | Base edition on most nodes |
| Maximo users | All named accounts active | Authorized users after deprovisioning |
| ILMT status | Ineligible, defaulted to full capacity | Remediated with retroactive evidence |
Because it licenses hardware you never used. In a dense cluster, full capacity counting can multiply the PVU base by the ratio of physical cores to allocated virtual cores, and that ratio is the entire audit claim.
The defense rebuilt the facts before negotiating the money. ILMT was redeployed and configured correctly, historical hypervisor logs reconstructed the true high water marks, and the Passport Advantage entitlement record was consolidated into a single baseline.
It converted the dispute from a contractual default into a curable process gap. With ILMT live and generating clean quarterly reports, IBM's incentive shifted from maximizing the back claim to securing the renewal relationship.
The audit closed at a small fraction of the opening claim, with sub capacity eligibility preserved going forward. The group avoided both a forced enterprise agreement and retroactive full capacity fees, and kept its renewal calendar on its own terms.
Probably not the audit letter, but certainly the exposure. A standing ILMT control with quarterly review would have left the auditor nothing to anchor on, and the engagement file shows estates with that discipline settle fast and small.
The standard advice is to settle an IBM audit quickly by rolling the claim into a bigger ELA, because the discount optics look good and the dispute disappears. We disagree. In roughly 25 to 35 IBM engagements Morten Andersen advised in 2024 to 2025, customers who rebuilt the deployment and entitlement facts first closed 60 to 96 percent below the opening claim, while customers who went straight to the bundle conversation paid for the claim twice: once in the settlement and again in years of inflated subscription baseline. The buyer side move is to fix ILMT, rebuild the baseline, and only then talk commercial structure.
Three cuts of our advisory engagement file frame the size of the opportunity.
Source: Redress Compliance advisory engagement file, 2024 to 2025.
Five moves turn this analysis into a lower invoice on the next renewal.
White Paper · IBM
Defend an IBM Audit: The Full Buyer Side Playbook
Defend an IBM audit end to end: triage the claim, fix ILMT gaps, sample sub capacity, and turn a bad finding into a renewal you control. Read it free.
Stale ILMT reporting across a growing virtualized estate triggered it. Sub capacity eligibility depends on continuous ILMT operation, and the gap let the auditor assert full capacity PVU licensing.
More than 90 percent of the opening claim was removed. The settled figure reflected actual sub capacity deployment against a consolidated entitlement baseline rather than full capacity defaults.
Full capacity licenses every activated physical core in the server or cluster, while sub capacity licenses only the cores allocated to the virtual machines running the software. ILMT compliance is the condition for the cheaper sub capacity basis.
Yes. Remediating ILMT during the audit converts a contractual default into a curable gap, supports a retroactive evidence argument, and shifts the negotiation toward a forward compliance plan.
No. The audit closed as a standalone settlement at a fraction of the claim, and the group kept its renewal negotiation separate from the audit resolution.
The PVU and ILMT moves that close IBM audits at a fraction of the opening claim.
Used across more than five hundred enterprise engagements. Independent. Buyer side. Built for procurement leaders running the next renewal cycle.
The opening claim is an anchor, not a number. Rebuild the facts first and the money conversation changes completely.
500+ enterprise clients. 11 vendor practices. Industry recognized. One conversation can change what you pay for the next three years.
One buyer side briefing a week. Pricing moves, audit signals, and the levers that work. No vendor spin.