PowerFlex: "Unable to list Tenants" error in PowerFlex Manager UI
Summary: This article addresses an issue where PowerFlex Manager UI displays error "Error initializing provider Unable to list Tenants" when attempting to edit "Remote Users/Groups". The error is caused by a communication failure between the SSO and Pacific pods. ...
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Symptoms
An error stating "Error initializing provider Unable to list Tenants" is seen when attempting to edit "Remote Users/Groups" from PowerFlex Manager UI:
The error is reported in "sso" pods:
# check both sso pods
delladmin@mvm01:~> kubectl -n powerflex logs "$(kubectl -n powerflex get pod -l "app=sso" -o name | head -1)" | grep -i "list tenants"
delladmin@mvm01:~> kubectl -n powerflex logs "$(kubectl -n powerflex get pod -l "app=sso" -o name | tail -1)" | grep -i "list tenants"
2026-03-31T14:56:10.797Z ERROR 1 --- [nio-8083-exec-6] com.dell.sso.clients.CIAMClient : List Tenants request failed I/O error on GET request for "https://pacific.powerflex.svc/rest/v1/tenants": PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed
org.springframework.web.client.ResourceAccessException: I/O error on GET request for "https://pacific.powerflex.svc/rest/v1/tenants": PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed
2026-03-31T14:56:10.801Z ERROR 1 --- [nio-8083-exec-6] c.dell.sso.controllers.CIAMController : CIAM API init failed: Unable to list Tenants
Check for errors from "pacific" pod in the same timeframe:
# use time value from previous output (e.g. 1901-01-01T00:00:00Z)
delladmin@mvm01:~> kubectl -n powerflex logs "$(kubectl -n powerflex get pod -l "release=pacific" -o name)" --since-time "2026-03-31T14:56:10Z" | grep "error"
time="2026-03-31T14:56:10.778Z" level=info msg="http: TLS handshake error from 172.26.1.182:35466: remote error: tls: unknown certificate" prog="ciam service"
Cause
The "sso" pods are unable to communicate with "pacific" pod, usually related to TLS certificate errors. This issue is observed after configuring a LDAP provider or after certain operations (pod deletion, certificate renewal,...).
Resolution
Restart "pacific" pod:
kubectl -n powerflex rollout restart deployment pacific
kubectl -n powerflex rollout status deployment pacific
Please note other issues may also raise the same error message in PowerFlex Manager.
Contact Dell support if issue persists after applying this resolution.
Affected Versions:
PowerFlex 4.x
Fixed Versions:
(future release)
Affected Products
PowerFlex rack, ScaleIOArticle Properties
Article Number: 000467720
Article Type: Solution
Last Modified: 26 مايو 2026
Version: 3
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.