"Depot connection has issues. Depot Invalid User Credential", SDDC fails to download the updates from online repositories

Products

• VMware SDDC Manager / VCF Installer
• VMware Cloud Foundation

Issue/Introduction

• SDDC Manager is no longer able to download updates from the internet facing VMware by Broadcom public repositories. 
• Depot Settings shows following error:
• Unable to change the username under Depot settings.
  
  Some depot connections have issues, which may disrupt software bundle downloads and compatibility data sync

Depot connection has issues. Depot Invalid User Credential
  
  
  
  
  
• Error connecting to depot, depot.vmware.com: Name or service not known

       

• Bundle Management shows the Warning "Some depot connection issues may prevent all the latest bundles from being shown and/or downloaded".
  
  
  
  
• SDDC LCM logs shows similar to below snippets :
  
  /var/log/vmware/vcf/lcm/lcm-debug.log

YYYY-MM-DDTHH:MM:SS.444+0000 DEBUG [vcf_lcm,91ce0966a98f4d1f,1304] [c.v.e.s.l.b.d.depot.DepotDownloader,http-nio-127.0.0.1-7400-exec-4] Getting file size for [/COMP/SDDC_MANAGER_VCF/index.v3] from URL[https://<depot_url>/index.v3]
YYYY-MM-DDTHH:MM:SS.444+0000 DEBUG [vcf_lcm,91ce0966a98f4d1f,1304] [c.v.e.s.l.b.d.d.utils.CookieUtils,http-nio-127.0.0.1-7400-exec-4] VCF_DEPOT Depot Http Cookies: []
YYYY-MM-DDTHH:MM:SS.457+0000 DEBUG [vcf_lcm,91ce0966a98f4d1f,1304] [c.v.e.s.l.b.d.depot.DepotDownloader,http-nio-127.0.0.1-7400-exec-4] Executing HEAD /<id>/PROD/COMP/SDDC_MANAGER_VCF/index.v3
YYYY-MM-DDTHH:MM:SS.798+0000 DEBUG [vcf_lcm,91ce0966a98f4d1f,1304] [c.v.e.s.l.b.d.depot.DepotDownloader,http-nio-127.0.0.1-7400-exec-4] Got response: 401 Unauthorized HTTP/1.1
YYYY-MM-DDTHH:MM:SS.798+0000 ERROR [vcf_lcm,91ce0966a98f4d1f,1304] [c.v.e.s.l.b.d.depot.DepotDownloader,http-nio-127.0.0.1-7400-exec-4] Error getting file size, got response: 401 Unauthorized HTTP/1.1
YYYY-MM-DDTHH:MM:SS.799+0000 ERROR [vcf_lcm,91ce0966a98f4d1f,1304] [c.v.e.s.l.b.d.depot.DepotDownloader,http-nio-127.0.0.1-7400-exec-4] Got Http error[401] while downloading manifest index [/COMP/SDDC_MANAGER_VCF/index.v3] from <depot>:443 with user

Environment

SDDC Manager 4.5.x
SDDC Manager 5.x

Cause

Broadcom transitioned to unique, token-based authentication for VCF downloads. SDDC Manager requires a specific vCenter download token and updated repository URLs in the configuration properties to authenticate with `dl.broadcom.com`

Resolution

 

Fixed in release 5.2.2 and higher. See  Download Broadcom products and software for steps to download this release. For versions below 5.2.2, follow the manual configuration steps:

1.  Generate a Download Token from the Broadcom Support Portal following Authenticated downloads Configuration Instructions
2.  Take a VM snapshot of the SDDC Manager appliance.

3.  Establish an SSH session to the SDDC Manager as `vcf` and switch to `root`.

4.  Open the properties file: `vi /opt/vmware/vcf/lcm/lcm-app/conf/application-prod.properties`.

5.  Locate the `LCM DEPOT PROPERTIES` section and update the following lines:
    *   `lcm.depot.adapter.host=dl.broadcom.com`
    *   `lcm.depot.adapter.remote.rootDir=//PROD`
    *   `lcm.depot.adapter.remote.repoDir=/COMP/SDDC_MANAGER_VCF`
    *   `lcm.depot.adapter.remote.lcmManifestDir=/COMP/SDDC_MANAGER_VCF/lcm/manifest`
    *   `lcm.depot.adapter.remote.lcmProductVersionCatalogDir=/COMP/SDDC_MANAGER_VCF/lcm/productVersionCatalog`

6.  Save the file and exit (`:wq!`)

7.  Restart the lifecycle service: `systemctl restart lcm`.

8.  Log in to the SDDC Manager UI, navigate to Depot Settings, and re-authenticate using the generated token.

 

Additional Information

"Cannot validate proxy configuration. Proxy server didn't allow connection from VCF SDDC Manager to destination URL", Configuring proxy in SDDC Manager fails

Authenticated Download Configuration Update Script