Symptoms

Dell Networking switches (S4112F-ON, S4148F-ON, Z9100-ON, and Z9264-ON) running DNOS 10.4, 10.5.0.2, and 10.5.0.6 have an x509 certificate expiration of July 27, 2021. Note: If the switch is running 10.5.0.6 and rebooted after July 27, 2021, it does not complete the configuration process for the data path of Isilon nodes. Thus, leaving that path unavailable until remediation can be applied. The following matrix describes the versions and their impacted features if the certificate has expired. DNOS VersionNo Switch RebootAfter Switch Reboot10.5.0.6 Data path remains availableThe switch remains reachable from the clusterThe cluster can continue to monitor switches through celogNew nodes cannot be added to the cluster The data path is no longer be available to nodes on the backend interfaceThe switch is unreachable from the cluster and requires console access to mitigateThe cluster cannot monitor switches through celogNew nodes cannot be added to the cluster 10.5.0.2 Data path remains availableThe switch remains reachable from the clusterThe cluster can continue to monitor switches through celogNew nodes cannot be added to the cluster Data path remains availableThe switch remains reachable from the clusterThe cluster cannot monitor switches through celogNew nodes cannot be added to the cluster 10.4 (10.4.1.4, 10.4.1.5, 10.4.3.2) Data path remains availableThe switch remains reachable from the clusterThe cluster can continue to monitor switches through celogNew nodes cannot be added to the cluster Data path remains availableThe switch remains reachable from the clusterThe cluster cannot monitor switches through celogNew nodes cannot be added to the cluster To identify the current version that you are running, perform the following: If the switch has not rebooted, there are two options (start with option 1): Option 1: Check int-a switch # isi_dump_fabric int-a | grep -E "Spine|Leaf" | grep -v leaf | cut -d: -f1 Check the int-b switch # isi_dump_fabric int-b | grep -E "Spine|Leaf" | grep -v leaf | cut -d: -f1 Option 2 (default password "admin"): Check int-a switch # ssh admin@fdfe:9042:c53d::5eff:fe00:101 show version Check the int-b switch # ssh admin@fda7:e6ee:2e09::5eff:fe00:102 show version If the switch has been rebooted, the following must be performed to confirm the affected version: Console access to the switchLog in as "admin"Run the following command to check version # show version

Cause

The certificate expiration does not allow the data path's virtual network to be configured during boot. Thus, the data path does not become available for the nodes.

Resolution

All switch models must be upgraded to target code 10.5.0.6C3. For further information about the latest qualified DNOS for PowerScale solutions, review article PowerScale: Current Target Operating System for Switches that are Used as Isilon Backend. If you find that you are running an affected version of DNOS, contact Dell Support for assistance.

Support Cases