PowerFlex ESXi inventory fails when lockdown mode is enabled

Summary: When ESXi lockdown mode is enabled on ESXi hosts that are managed by PowerFlex Management Platform. PFxM is unable to inventory the hosts ESXi OS.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.
Check out other resources

Symptoms

When performing tasks in PFxM like Run Inventory, Node Add, Node Delete, Add Volume, or Add Network, a resource group can go into an ERROR state if lockdown mode is enabled on any or all hosts in managed by the Resource Group.

Lockdown mode enabled and SSH enabled

The following is logged to the deployment.log file: 
Pod: thin-deployer
Log: /opt/Dell/ASM/deployments/UUIDMATCHINGRG/deployment.log

service_deployment.rb:675:in `process': Failed to execute esxcli command on host  esx-host.corp.company.com: esxcli 600 env VI_PASSWORD=****** esxcli -s  esx-host.corp.company.com -u root -d 85:49:3B:39:16:85:FE:E7:C9:37:8D:24:00:B0:12:0F:59:9F:33:D5 network nic list: #<Hashie::Mash exit_status=1 pid=17483 stderr="" stdout="Error: Permission to perform this operation was denied..\n">
service_deployment.rb:678:in `process': Status: Error
The following is logged in the device inventory log file: 
Log: /opt/Dell/ASM/device/rackserver-1234abc/1741713765.log

2025-03-11 17:26:50 +0000: Error during iDRAC inventory: RbVmomi::Fault:NoPermission: Permission to perform this operation was denied. /opt/puppetlabs/puppet/lib/ruby/gems/2.7.0/gems/rbvmomi-2.2.0/lib/rbvmomi/connection.rb:63:in `parse_response'
        /opt/puppetlabs/puppet/lib/ruby/gems/2.7.0/gems/rbvmomi-2.2.0/lib/rbvmomi/connection.rb:92:in `call'
        /opt/puppetlabs/puppet/lib/ruby/gems/2.7.0/gems/rbvmomi-2.2.0/lib/rbvmomi/basic_types.rb:213:in `_call'
        /opt/puppetlabs/puppet/lib/ruby/gems/2.7.0/gems/rbvmomi-2.2.0/lib/rbvmomi/basic_types.rb:76:in `block (2 levels) in init'
        /opt/puppetlabs/puppet/lib/ruby/gems/2.7.0/gems/rbvmomi-2.2.0/lib/rbvmomi/vim.rb:62:in `block in connect'
        /opt/puppetlabs/puppet/lib/ruby/gems/2.7.0/gems/rbvmomi-2.2.0/lib/rbvmomi/vim.rb:45:in `tap'
        /opt/puppetlabs/puppet/lib/ruby/gems/2.7.0/gems/rbvmomi-2.2.0/lib/rbvmomi/vim.rb:45:in `connect'
        /opt/asm-deployer/lib/asm/os_inventory_run.rb:491:in `block in gather_esxi_disk_map_inventory'
        /opt/puppetlabs/puppet/lib/ruby/2.7.0/timeout.rb:95:in `block in timeout'
        /opt/puppetlabs/puppet/lib/ruby/2.7.0/timeout.rb:33:in `block in catch'
        /opt/puppetlabs/puppet/lib/ruby/2.7.0/timeout.rb:33:in `catch'
        /opt/puppetlabs/puppet/lib/ruby/2.7.0/timeout.rb:33:in `catch'
        /opt/puppetlabs/puppet/lib/ruby/2.7.0/timeout.rb:110:in `timeout'
        /opt/asm-deployer/lib/asm/os_inventory_run.rb:488:in `gather_esxi_disk_map_inventory'
        /etc/puppetlabs/puppet/modules/asm/bin/idrac-discovery.rb:434:in `block (2 levels) in <main>'
#<Thread:0x00007f6f0c56bee0 /etc/puppetlabs/puppet/modules/asm/bin/idrac-discovery.rb:433 run> terminated with exception (report_on_exception is true):
/opt/puppetlabs/puppet/lib/ruby/gems/2.7.0/gems/rbvmomi-2.2.0/lib/rbvmomi/connection.rb:63:in `parse_response': NoPermission: Permission to perform this operation was denied. (RbVmomi::Fault)

Cause

Lockdown mode enabled and SSH enabled.

Resolution

Prior to performing any tasks on ESXi hosts managed by PowerFlex Management Platform.   Disable Lockdown mode on the ESXi hosts that are managed by the Resource Group.

Affected Products

PowerFlex rack, PowerFlex Appliance, PowerFlex rack RCM Software
Article Properties
Article Number: 000293707
Article Type: Solution
Last Modified: 16 Apr 2025
Version:  2
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.