PowerFlex: "Unable to list Tenants" error in PowerFlex Manager UI

Summary: This article addresses an issue where PowerFlex Manager UI displays error "Error initializing provider Unable to list Tenants" when attempting to edit "Remote Users/Groups". The error is caused by a communication failure between the SSO and Pacific pods. ...

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.

Symptoms

An error stating "Error initializing provider Unable to list Tenants" is seen when attempting to edit "Remote Users/Groups" from PowerFlex Manager UI:

Error initializing provider Unable to list Tenants

The error is reported in "sso" pods:

# check both sso pods
delladmin@mvm01:~> kubectl -n powerflex logs "$(kubectl -n powerflex get pod -l "app=sso" -o name | head -1)" | grep -i "list tenants"
delladmin@mvm01:~> kubectl -n powerflex logs "$(kubectl -n powerflex get pod -l "app=sso" -o name | tail -1)" | grep -i "list tenants"
2026-03-31T14:56:10.797Z ERROR 1 --- [nio-8083-exec-6] com.dell.sso.clients.CIAMClient : List Tenants request failed I/O error on GET request for "https://pacific.powerflex.svc/rest/v1/tenants": PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed
org.springframework.web.client.ResourceAccessException: I/O error on GET request for "https://pacific.powerflex.svc/rest/v1/tenants": PKIX path validation failed: java.security.cert.CertPathValidatorException: validity check failed
2026-03-31T14:56:10.801Z ERROR 1 --- [nio-8083-exec-6] c.dell.sso.controllers.CIAMController : CIAM API init failed: Unable to list Tenants

Check for errors from "pacific" pod in the same timeframe:

# use time value from previous output (e.g. 1901-01-01T00:00:00Z)
delladmin@mvm01:~> kubectl -n powerflex logs "$(kubectl -n powerflex get pod -l "release=pacific" -o name)" --since-time "2026-03-31T14:56:10Z" | grep "error"
time="2026-03-31T14:56:10.778Z" level=info msg="http: TLS handshake error from 172.26.1.182:35466: remote error: tls: unknown certificate" prog="ciam service"

Cause

The "sso" pods are unable to communicate with "pacific" pod, usually related to TLS certificate errors. This issue is observed after configuring a LDAP provider or after certain operations (pod deletion, certificate renewal,...).

Resolution

Restart "pacific" pod:

kubectl -n powerflex rollout restart deployment pacific
kubectl -n powerflex rollout status deployment pacific

Please note other issues may also raise the same error message in PowerFlex Manager.
Contact Dell support if issue persists after applying this resolution.

 

Affected Versions:
PowerFlex 4.x

 

Fixed Versions:
(future release)

Affected Products

PowerFlex rack, ScaleIO
Article Properties
Article Number: 000467720
Article Type: Solution
Last Modified: 26 مايو 2026
Version:  3
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.