VUM remediation fails with (Connection reset by peer) when third party depots are configured

Products

• VMware vCenter Server

Issue/Introduction

• The vCenter Update Manager (VUM) / vSphere Lifecycle Manager (vLCM) service fails when third-party VIB depots are configured. The process usually fails at 60%.
  
  
• The following error stack appears in the Update Manager server log at /var/log/vmware/vmware-updatemgr/vmware-vum-server.log

  

  YYYY-MM-DD HH:MM:SS info vmware-vum-server[30670] [Originator@6876 sub=ConfigurationMgr] [configurationMgr 1587] Setting third party host update URL to :http://####.###.com/index-drv.xml
  YYYY-MM-DD HH:MM:SS verbose vmware-vum-server[31011] [Originator@6876 sub=httpDownload] [httpDownloadPosix 188] * Host ####.###.com:80 was resolved.
  YYYY-MM-DD HH:MM:SS verbose vmware-vum-server[31011] [Originator@6876 sub=httpDownload] [httpDownloadPosix 188] * IPv6: (none)
  YYYY-MM-DD HH:MM:SS verbose vmware-vum-server[31011] [Originator@6876 sub=httpDownload] [httpDownloadPosix 188] * IPv4: ###.###.###.##
  YYYY-MM-DD HH:MM:SS verbose vmware-vum-server[31011] [Originator@6876 sub=httpDownload] [httpDownloadPosix 188] *   Trying ###.###.###.##:80...
  YYYY-MM-DD HH:MM:SS verbose vmware-vum-server[31011] [Originator@6876 sub=httpDownload] [httpDownloadPosix 188] * Connected to ####.###.com (###.###.###.###) port 80
  YYYY-MM-DD HH:MM:SS verbose vmware-vum-server[31011] [Originator@6876 sub=httpDownload] [httpDownloadPosix 188] > GET /index-drv.xml HTTP/1.1
  YYYY-MM-DD HH:MM:SS verbose vmware-vum-server[31011] [Originator@6876 sub=httpDownload] [httpDownloadPosix 188] Host: ####.###.com
  YYYY-MM-DD HH:MM:SS verbose vmware-vum-server[31011] [Originator@6876 sub=httpDownload] [httpDownloadPosix 188] Accept: */*
  YYYY-MM-DD HH:MM:SS verbose vmware-vum-server[31011] [Originator@6876 sub=httpDownload] [httpDownloadPosix 188]
  YYYY-MM-DD HH:MM:SS verbose vmware-vum-server[31011] [Originator@6876 sub=httpDownload] [httpDownloadPosix 188] * Request completely sent off
  YYYY-MM-DD HH:MM:SS verbose vmware-vum-server[31011] [Originator@6876 sub=httpDownload] [httpDownloadPosix 188] * Recv failure: Connection reset by peer
  YYYY-MM-DD HH:MM:SS verbose vmware-vum-server[31011] [Originator@6876 sub=httpDownload] [httpDownloadPosix 188] * Closing connection
  YYYY-MM-DD HH:MM:SS error vmware-vum-server[31011] [Originator@6876 sub=httpDownload] [httpDownloadPosix 763] curl_easy_perform() failed: cURL Error: Failure when receiving data from the peer, Recv failure: Connection reset by peer
  YYYY-MM-DD HH:MM:SS warning vmware-vum-server[31011] [Originator@6876 sub=VumVapi::Lib::Utils] [EmbeddedPyServiceProvider 472] Connecting to http://####.###.com/index-drv.xml failed, err: curl_easy_perform() failed: cURL Error: Failure when receiving data from the peer, Recv failure: Connection reset by peer

Environment

VMware vCenter Server 8.x

Cause

• The repository owner restricted access to HTTPS only, causing the connection to reset when using HTTP.
• A proxy server configured for the vCenter Server Appliance is not set correctly.
• The third-party server closes the connection abruptly, resulting in a Connection reset by peer error.

Resolution

1. Change the download URL from HTTP to HTTPS within the vSphere Lifecycle Manager administration interface. In the vSphere Client, navigate to Menu > Lifecycle Manager > Settings > Patch Setup, click New to add the HTTPS URL, and disable the old HTTP URL.
2. Verify vCenter Server Appliance proxy settings according to How to configure proxy settings for vCenter Server.
3. Contact the support team for the third-party company providing the repository if the connection fails after attempting protocol changes.
4. If the issue involves the hostupdate.vmware.com URL, review Error: A general system error occurred: Failed to download VIB(s): Error: HTTP Error Code: 403, vLCM fails to download the ESXi patches and images from online repositories.