"Executing download job throws error: HTTP Error Code: 403" UMDS fails to download the patches from online repositories

Products

• VMware vSphere ESXi

Issue/Introduction

• Update Manager Download Service (UMDS) shows below errors while trying to download patches from the online repositories :

YYYY-MM-DDTHH:MM:SS.675-05:00 error vmware-downloadService[08287] [Originator@6876 sub=DownloadMgr] [downloadMgr 705] Executing download job {140623269075984} throws error: HTTP Error Code: 403
YYYY-MM-DDTHH:MM:SS.675-05:00 info vmware-downloadService[08287] [Originator@6876 sub=DownloadMgr] [downloadMgr 807] Download failed but destination file /tmp/<filename> exists and is valid. Ignoring error
YYYY-MM-DDTHH:MM:SS.675-05:00 info vmware-downloadService[08287] [Originator@6876 sub=DownloadMgr] [downloadMgr 643] Download job {140623269075984} finished, bytes downloaded = 0
YYYY-MM-DDTHH:MM:SS.675-05:00 error vmware-downloadService[08294] [Originator@6876 sub=Default] [updateDownloaderImpl 116] File download error: Downloading file: https://<depot>/software/VUM/PRODUCTION/main/vmw-depot-index.xml failed, 0 byte downloaded.
YYYY-MM-DDTHH:MM:SS.676-05:00 error vmware-downloadService[08294] [Originator@6876 sub=Default] [updateDownloaderImpl 245] failed to download vendor index file: https://<depot>/software/VUM/PRODUCTION/main/vmw-depot-index.xml
YYYY-MM-DDTHH:MM:SS.676-05:00 error vmware-downloadService[08294] [Originator@6876 sub=Default] [hostUpdate20Downloader 173] There was an error downloading from : https://<depot>/software/VUM/PRODUCTION/main/vmw-depot-index.xml

Environment

Update Manager Download Service (UMDS)

Cause

Public facing repository URLs and authentication mechanisms are changing. Download URLs are no longer common but unique for each customer therefore will require to be re-configured.

Resolution

1. Download the Token from Broadcom Support Portal by following the steps in VCF Authenticated downloads Configuration Update Instructions. If you already have it, apply the same by following below instructions.
   
   
2. Updated the download URLs in UMDS configuration files
   • SSH to UMDS VM
   • Edit the config file downloadConfig.xml - Eg: vi /usr/local/vmware-umds/bin/downloadConfig.xml  - exact path will depend on UMDS install location
   • In the file - downloadConfig.xml, under <HostConfig> section, replace URL strings as follows:
     
     Note: Replace <Download Token> with the actual downloaded token id.
     
     

     Current URL	Replace with
     https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml	https://dl.broadcom.com/<Download Token>/PROD/COMP/ESX_HOST/main/vmw-depot-index.xml
     https://hostupdate.vmware.com/software/VUM/PRODUCTION/addon-main/vmw-depot-index.xml	https://dl.broadcom.com/<Download Token>/PROD/COMP/ESX_HOST/addon-main/vmw-depot-index.xml
     https://hostupdate.vmware.com/software/VUM/PRODUCTION/iovp-main/vmw-depot-index.xml	https://dl.broadcom.com/<Download Token>/PROD/COMP/ESX_HOST/iovp-main/vmw-depot-index.xml
     https://hostupdate.vmware.com/software/VUM/PRODUCTION/vmtools-main/vmw-depot-index.xml	https://dl.broadcom.com/<Download Token>/PROD/COMP/ESX_HOST/vmtools-main/vmw-depot-index.xml

     
     Note: To shorten the download time in UMDS, it is recommended to enable downloads only for release lines authorized by the Download Token. Otherwise, overall content download time will be prolonged, as UMDS will try to download unauthorized release line files (with retries).

     • vmware-umds -G - This command will give all the releases currently supported by UMDS.

       Example: 
       vmware-umds -G
       Host Versions for which patch content will be downloaded:
       esxio-8.0-INTL
       esxio-9.0-INTL
       embeddedEsx-8.0-INTL
       embeddedEsx-9.0-INTL

     • vmware-umds -S -d <release name> - To remove specific releases from the UMDS configuration.

       Example:
       vmware-umds  -S -d esxio-8.0-INTL

       Setting up UMDS configuration
Host update downloads for platform esxio-8.0-INTL: Disabled