PowerFlex 3.x Failed to approve LIA certificate Number of Trusted IPs exceeds MAX_TRUSTED_IPS [6]

Summary: Unable to install VxFlex OS. Error Command failed: Failed to approve LIA certificate (node: [IP1, IP2]) due to: Internal Error

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.

Symptoms



In the scaleIO.log file on the Gateway we see the following errors during the installation when it fails:-

2

018-07-26 11:52:33,398 [executor-41] INFO c.e.s.s.d.i.c.ApproveLiaCertificateCommand - running pre-executor for .ApproveLiaCertificateCommand 2018-07-26 11:52:33,398 [executor-41] INFO c.e.s.s.d.i.c.ApproveLiaCertificateCommand - running pre-executor for .ApproveLiaCertificateCommand complete in 0 ms 2018-07-26 11:52:33,399 [executor-41] INFO c.e.s.s.i.s.i.c.LIANodeConnection - Creating LIANodeConnection for LinuxSystemNode[nodeName=<null>,nodeIPs=[10.40.XX.XX, 10.40.XX.YY],credentials=<null>] 2018-07-26 11:52:33,399 [executor-41] INFO c.e.s.s.i.s.i.c.LIANodeConnection - Get and approve certificate to LinuxSystemNode[nodeName=<null>,nodeIPs=[10.40.121.38, 10.40.121.8],credentials=<null>] 2018-07-26 11:52:33,399 [executor-41] ERROR c.e.s.s.i.s.i.c.LIANodeConnection - Failed retrieving certificate of 10.40.XX.XX 2018-07-26 11:52:33,401 [executor-41] ERROR c.e.s.s.i.s.i.c.LIANodeConnection - Failed retrieving certificate of 10.40.XX.YY 2018-07-26 11:52:33,401 [executor-41] ERROR c.e.s.s.i.s.i.c.LIANodeConnection - Failed to get LIA certificate from all ips: [10.40.XX.XX, 10.40.XX.YY] 2018-07-26 11:52:33,401 [executor-41] ERROR c.e.s.s.d.i.c.ApproveLiaCertificateCommand - Error Failed to approve LIA certificate (node: [10.40.XX.XX, 10.40.XX.YY]) due to: Internal Error executing command .ApproveLiaCertificateCommand (retry) : com.emc.s3g.scaleio.im.services.installation.connectors.LIANodeConnection.getAndApproveNodeCertificate(LIANodeConnection.java:3171) com.emc.s3g.scaleio.domain.installation.commands.ApproveLiaCertificateCommand.executeScaleIONodeCommand(ApproveLiaCertificateCommand.java:26) com.emc.s3g.scaleio.domain.installation.commands.ApproveLiaCertificateCommand.executeScaleIONodeCommand(ApproveLiaCertificateCommand.java:16) com.emc.s3g.scaleio.domain.installation.commands.ScaleIONodeCommand.executeNodeCommand(ScaleIONodeCommand.java:31) com.emc.s3g.scaleio.domain.installation.commands.NodeCommand.executeCommand(NodeCommand.java:92) com.emc.s3g.scaleio.domain.installation.commands.BaseCommand.call(BaseCommand.java:515) java.util.concurrent.FutureTask.run(FutureTask.java:266) java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149) java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624) java.lang.Thread.run(Thread.java:74 

Looking at the LIA logs trace.0 in the LIA folder we see the following error:-

30/07 09:08:50.071281 0x1b4aeb0:liaNet_Init:01683: Number of Trusted IPs exceeds MAX_TRUSTED_IPS [6] - check config file , ignore rest of IP's

 


As per the Deployment Guide:-
To restrict which Gateway IP addresses can access the LIA, add those IP addresses to this line in the conf.txt file:
lia_trusted_ips=<IP_ADDRESS_1>,<IP_ADDRESS_2>

To set this during LIA installation, set the TRUSTED_IPS environment variable. For example:
TRUSTED_IPS=IP1,IP2 rpm -i lia.rpm

Deployment guide does not mention how many IPs you can use in the above list of TRUSTED_IPS. 

Cause

Using more than 6 IPs

Resolution

You can use a maximum of 6 IP addresses in TRUSTED_IPS list while installing LIA. If you are using more, try to use 6 or less and retry installation.
Article Properties
Article Number: 000161314
Article Type: Solution
Last Modified: 03 Sept 2025
Version:  5
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.