# I am not able to perform operations using ./bin/admin after enabling encryption at transit

**URL:** <https://forum.yugabyte.com/t/i-am-not-able-to-perform-operations-using-bin-admin-after-enabling-encryption-at-transit/1167>\
**Category:** General\
**Created:** [August 12, 2021, 7:50am UTC](https://forum.yugabyte.com/t/i-am-not-able-to-perform-operations-using-bin-admin-after-enabling-encryption-at-transit/1167 "2021-08-12T07:50:32Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![AddictionAwesome](https://avatars.discourse-cdn.com/v4/letter/a/76d3ee/32.png) [@AddictionAwesome](https://forum.yugabyte.com/u/AddictionAwesome)\
**Post date:** [August 12, 2021, 7:50am UTC](https://forum.yugabyte.com/t/i-am-not-able-to-perform-operations-using-bin-admin-after-enabling-encryption-at-transit/1167/1 "2021-08-12T07:50:32Z")

</div>

Setup: Three nodes, replication factor 3, yugabyte 2.6.0.0  
Issue:  
I have configured the encryption at transit for yugabyte cluster using below documentation.  
([Encryption in transit on YugabyteDB Clusters | YugabyteDB Docs](https://docs.yugabyte.com/latest/secure/tls-encryption/))  
After enabling the encryption, I am not able to perform below operations  
./bin/yb-admin -master\_addresses $MASTER list\_all\_masters  
./bin/yb-admin -master\_addresses $MASTER list\_all\_tablet\_servers  
./bin/yb-admin -master\_addresses $MASTER change\_master\_config REMOVE\_SERVER $failedMaster 7100  
./bin/yb-admin -master\_addresses $MASTER change\_master\_config ADD\_SERVER $newMaster 7100  
getting the below error

“Unable to establish connection to leader master at [MASTERIP1:7100,MASTERIP2:7100,MASTERIP3:7100].  
Please verify the addresses.\n\n: Could not locate the leader master: GetLeaderMasterRpc(addrs: [MASTERIP1:7100, MASTERIP2:7100, MASTERIP3:7100], num\_attempts: 338)  
passed its deadline 79595.999s (passed: 60.038s): Network error (yb/util/net/socket.cc:535):  
recvmsg got EOF from remote (system error 108)\nTimed out (yb/rpc/rpc.cc:211):  
Unable to establish connection to leader master at [MASTERIP1:7100,MASTERIP2:7100,MASTERIP3:7100].  
Please verify the addresses.\n\n: Could not locate the leader master: GetLeaderMasterRpc(addrs: [MASTERIP1:7100, MASTERIP2:7100, MASTERIP3:7100]”

(Note: Actual IP’s are replaced with MASTERIP )

Note: with same setup, without enabling encryption at transit I was able to perform the above operations without any issues

---

<div class="post-metadata">

**Author:** ![dorian\_yugabyte](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.yugabyte.com/dorian_yugabyte/32/206_2.png) [@dorian\_yugabyte](https://forum.yugabyte.com/u/dorian_yugabyte)\
**Post date:** [August 12, 2021, 8:26am UTC](https://forum.yugabyte.com/t/i-am-not-able-to-perform-operations-using-bin-admin-after-enabling-encryption-at-transit/1167/2 "2021-08-12T08:26:42Z")

</div>

Hi @AddictionAwesome

Is the cluster functioning normally ? Can you paste a screenshot of `http://<yb-master-ip>:7000/tablet-servers` ?

---

<div class="post-metadata">

**Author:** ![AddictionAwesome](https://avatars.discourse-cdn.com/v4/letter/a/76d3ee/32.png) [@AddictionAwesome](https://forum.yugabyte.com/u/AddictionAwesome)\
**Post date:** [August 12, 2021, 9:28am UTC](https://forum.yugabyte.com/t/i-am-not-able-to-perform-operations-using-bin-admin-after-enabling-encryption-at-transit/1167/3 "2021-08-12T09:28:38Z")

</div>

@dorian_yugabyte, No issues with the cluster.

 ![yugabyteTablet](https://canada1.discourse-cdn.com/flex027/uploads/yugabyte/original/1X/47484959693530442a22734cddd0920eab990806.jpeg)

Please find the attached screenshot.

tserver.conf  
-tserver\_master\_addrs=MASTERIP  
–rpc\_bind\_addresses=IP:9100  
–start\_pgsql\_proxy  
–pgsql\_proxy\_bind\_address=IP:5433  
–cql\_proxy\_bind\_address=IP:9042  
–fs\_data\_dirs=/yb/data/disk1  
–placement\_region=us-central  
–placement\_zone=us-central1-b  
–certs\_dir=/yb/data/certs/IP  
–use\_node\_to\_node\_encryption=true  
–allow\_insecure\_connections=false  
–certs\_for\_client\_dir=/yb/data/certs/IP  
–use\_client\_to\_server\_encryption=true

* * *

master.conf  
–master\_addresses=MASTERIP  
–rpc\_bind\_addresses=IP:7100  
–fs\_data\_dirs=/yb/data/disk1  
–placement\_region=us-central  
–placement\_zone=us-central1-b  
–default\_memory\_limit\_to\_ram\_ratio=0.35  
–durable\_wal\_write=true  
–certs\_dir=/yb/data/certs/IP  
–allow\_insecure\_connections=false  
–use\_node\_to\_node\_encryption=true

---

<div class="post-metadata">

**Author:** ![Alan\_Caldera](https://yyz1.discourse-cdn.com/flex027/user_avatar/forum.yugabyte.com/alan_caldera/32/91_2.png) [@Alan\_Caldera](https://forum.yugabyte.com/u/Alan_Caldera)\
**Post date:** [August 12, 2021, 12:22pm UTC](https://forum.yugabyte.com/t/i-am-not-able-to-perform-operations-using-bin-admin-after-enabling-encryption-at-transit/1167/4 "2021-08-12T12:22:03Z")

</div>

You need to pass the location of your certificates directory via --certs\_dir\_name on the `yb-admin` command. Then it will function as expected.

---

<div class="post-metadata">

**Author:** ![AddictionAwesome](https://avatars.discourse-cdn.com/v4/letter/a/76d3ee/32.png) [@AddictionAwesome](https://forum.yugabyte.com/u/AddictionAwesome)\
**Post date:** [August 12, 2021, 3:56pm UTC](https://forum.yugabyte.com/t/i-am-not-able-to-perform-operations-using-bin-admin-after-enabling-encryption-at-transit/1167/5 "2021-08-12T15:56:54Z")

</div>

Thanks @Alan_Caldera.