"Depot connection has issues. Depot Invalid User Credential", SDDC fails to download the updates from online repositories

Products

• VMware SDDC Manager / VCF Installer
• VMware Cloud Foundation

Issue/Introduction

• SDDC Manager is no longer able to download updates from the internet facing VMware by Broadcom public repositories. 
• Depot Settings shows following error:
• Unable to change the username under Depot settings.
  
  Some depot connections have issues, which may disrupt software bundle downloads and compatibility data sync

Depot connection has issues. Depot Invalid User Credential
  
  
  
  
  
• Error connecting to depot, depot.vmware.com: Name or service not known

       

• Bundle Management shows the Warning "Some depot connection issues may prevent all the latest bundles from being shown and/or downloaded".
  
  
  
  
• SDDC LCM logs shows similar to below snippets :
  
  /var/log/vmware/vcf/lcm/lcm-debug.log

YYYY-MM-DDTHH:MM:SS.444+0000 DEBUG [vcf_lcm,91ce0966a98f4d1f,1304] [c.v.e.s.l.b.d.depot.DepotDownloader,http-nio-127.0.0.1-7400-exec-4] Getting file size for [/COMP/SDDC_MANAGER_VCF/index.v3] from URL[https://<depot_url>/index.v3]
YYYY-MM-DDTHH:MM:SS.444+0000 DEBUG [vcf_lcm,91ce0966a98f4d1f,1304] [c.v.e.s.l.b.d.d.utils.CookieUtils,http-nio-127.0.0.1-7400-exec-4] VCF_DEPOT Depot Http Cookies: []
YYYY-MM-DDTHH:MM:SS.457+0000 DEBUG [vcf_lcm,91ce0966a98f4d1f,1304] [c.v.e.s.l.b.d.depot.DepotDownloader,http-nio-127.0.0.1-7400-exec-4] Executing HEAD /<id>/PROD/COMP/SDDC_MANAGER_VCF/index.v3
YYYY-MM-DDTHH:MM:SS.798+0000 DEBUG [vcf_lcm,91ce0966a98f4d1f,1304] [c.v.e.s.l.b.d.depot.DepotDownloader,http-nio-127.0.0.1-7400-exec-4] Got response: 401 Unauthorized HTTP/1.1
YYYY-MM-DDTHH:MM:SS.798+0000 ERROR [vcf_lcm,91ce0966a98f4d1f,1304] [c.v.e.s.l.b.d.depot.DepotDownloader,http-nio-127.0.0.1-7400-exec-4] Error getting file size, got response: 401 Unauthorized HTTP/1.1
YYYY-MM-DDTHH:MM:SS.799+0000 ERROR [vcf_lcm,91ce0966a98f4d1f,1304] [c.v.e.s.l.b.d.depot.DepotDownloader,http-nio-127.0.0.1-7400-exec-4] Got Http error[401] while downloading manifest index [/COMP/SDDC_MANAGER_VCF/index.v3] from <depot>:443 with user

 

• You may also see following error when trying to register SDDC Manager with VMware Depot :  " Failed to connect to VMware depot with the provided user credentials. Cause: {0}"
•  

Environment

SDDC Manager 4.5.x
SDDC Manager 5.x

Cause

Broadcom transitioned to unique, token-based authentication for VCF downloads. SDDC Manager requires a specific vCenter download token and updated repository URLs in the configuration properties to authenticate with dl.broadcom.com.

Resolution

Fixed in release 5.2.2 and higher. See  Download Broadcom products and software for steps to download this release. For versions below 5.2.2, follow the manual configuration steps:

1.  Generate a Download Token from the Broadcom Support Portal following Authenticated downloads Configuration Instructions.

2.  Take a VM snapshot of the SDDC Manager appliance.

3.  Establish an SSH session to the SDDC Manager as vcf and switch to root.

4.  Open the properties file: vi /opt/vmware/vcf/lcm/lcm-app/conf/application-prod.properties.

5.  Locate the LCM DEPOT PROPERTIES section and update the following lines:

lcm.depot.adapter.host=dl.broadcom.com
lcm.depot.adapter.remote.rootDir=/<DOWNLOAD_TOKEN_HERE>/PROD
lcm.depot.adapter.remote.repoDir=/COMP/SDDC_MANAGER_VCF
lcm.depot.adapter.remote.lcmManifestDir=/COMP/SDDC_MANAGER_VCF/lcm/manifest
lcm.depot.adapter.remote.lcmProductVersionCatalogDir=/COMP/SDDC_MANAGER_VCF/lcm/productVersionCatalog

6.  Save the file and exit (:wq!)

7.  Restart the lifecycle service: systemctl restart lcm.

8.  Log in to the SDDC Manager UI, navigate to Depot Settings, and re-authenticate using the generated token.

Additional Information

"Cannot validate proxy configuration. Proxy server didn't allow connection from VCF SDDC Manager to destination URL", Configuring proxy in SDDC Manager fails

Authenticated Download Configuration Update Script