Downloading patches from one of the selected sources configured in VMware vCenter Update Manager fails

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:

• Downloading patches from one of the software sites configured in VMware vCenter Update Manager fails.
• In VMware vCenter Update Manager server logs, you see entries similar to:
  
  [2011-11-01 15:24:57:425 'httpDownload' 4440 ERROR] [httpDownload, 732] Error 12175 from WinHttpSendRequest for url https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml

Note: The preceding log excerpts are only examples. Date, time, and environmental variables may vary depending on your environment.

Environment

VMware vCenter Update Manager 5.0.x
VMware vCenter Update Manager 6.0.x
VMware vCenter Update Manager 4.1.x
VMware vCenter Update Manager 4.0.x
VMware vCenter Update Manager 5.1.x
VMware vCenter Update Manager 5.5.x

Cause

Error 12175 deals with failed certificate validation. This issue can occur if one of the CA certificates used to sign the patch sites certificate is not trusted by the computer running the VMware vCenter Update Manager server software.

Resolution

Solution 1

Update Manager 5.0 introduces a new setting that verifies the SSL certificates during download. By default, this value is set to 1 or enabled.

 

To disable this behavior on vCenter 6.0 and lower:

1. Click Start > Run, enter regedit, and click OK. The Registry Editor window opens.
2. Navigate to the HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\VMware, Inc.\VMware Update Manager key.
3. Right-click the value of the SslVerifyDownloadCertificate key and click Modify.
4. Change the Value data field value to 0.
5. Click OK.
6. Click Start > Run, enter services.msc, and click OK.
7. Right-click VMware vSphere Update Manager Service and click Restart.

Solution 2

Trust the certificate for the site that is failing by installing it into the trusted certificate store for the local computer. You can also download and trust the CA certificates that were used in signing the site certificate into the local computer certificate store.

 

You may also want to update the root certificates on the Microsoft Windows operating system. For more information, see the Microsoft Download Center.

Note: On vCenter 6.5/6.7 with a 64bit Update Manager, the registry path is HKEY_LOCAL_MACHINE>SOFTWARE>VMware, Inc.>VMware 

You must download the corresponding version of root certificates for your operating system. For more information, see the Microsoft support documentation.

 

Note: The preceding link was correct as of November 12, 2015. If you find the link is broken, provide a feedback and a VMware employee will update the link.

Additional Information

選択したソースの 1 つへの VMware vCenter Update Manager によるパッチのダウンロードに失敗する