PowerFlex: SDS stays Disconnected After Generating New Certificate

In the following scenario, the end user had the following configurations:

• PowerFlex version 3.6.3 Software Only
• Converted the OS from Alma Linux 8.10 to CentOS 7.9
• The /opt/emc/scaleio/sds/cfg/rep_tgt.txt file had the correct parameters updated after the OS conversion.
• System ID and Previous SDS ID:

  • cat /opt/emc/scaleio/sds/cfg/rep_tgt.txt
    mdmId=1d5a21fb4797e30f,tgtId=3977f2e600000000

• Component authentication enabled:

  • scli --query_all|grep "MDM connection"
    MDM connection authentication: Enabled

Impact
The SDS cannot be re-connected to the cluster and contribute storage to the Storage Pool.

Generating the certificate had to be run twice for a successful reconfiguration

• Step 1: Run the certificate generation command twice:

  • scli --generate_certificate --sds_name <sds_name>
    scli --generate_certificate --sds_name <sds_name>

• Step 2: Validate the SDS is connected:

  • scli --query_all_sds | grep <sds_name>

You could also disable component authentication so that you do not have to run thought generate_certificate each time, however enabling component authentication after the activity completes, should be avoided. Refer to 'Warning' note below.

• Step 1: To disable authentication perform

  • scli --set_component_authentication_properties --dont_use_authentication

• Step 2: Validate the SDS is connected:

  • scli --query_all_sds | grep <sds_name>

scli --set_component_authentication_properties --use_authentication

Related article: PowerFlex: SVM OS Conversion Fails When MDM Authentication Is Enabled SDS_AUTHENTICATION_FAILED