VCF Authenticated Downloads Token Troubleshooting Guide

Products

• Support Portal

Issue/Introduction

The following article walks through various troubleshooting steps related to the VCF Authentication Download Token functionality available through the Broadcom Support Portal.

Resolution

If Download Tokens are not working you can test the direct return code from a web browser. The below 4 URL's can test if a token will work for vSphere 7.x & 8.x downloads. 

Depot	Version	Test URL (replace <downloadToken> with the download token id being tested)
Host Update (ESXi)	7.x	https://dl.broadcom.com/<downloadToken>/PROD/COMP/ESX_HOST/main/esx/vmw/vib20/bmcal/VMware_bootbank_bmcal_7.0.3-0.135.24585291.vib
Host Update (ESXi)	8.x	https://dl.broadcom.com/<downloadToken>/PROD/COMP/ESX_HOST/main/esx/vmw/vib20/bcm-mpi3/VMW_bootbank_bcm-mpi3_8.8.1.0.0.0-1vmw.803.0.0.24022510.vib
vApp Update (vCenter)	7.x	https://dl.broadcom.com/<downloadToken>/PROD/COMP/VCENTER/vmw/8d167796-34d5-4899-be0a-6daade4005a3/7.0.3.02300/package-pool/vmware-vsm-7.0.3.02300-15160956.x86_64.rpm
vApp Update (vCenter)	8.x	https://dl.broadcom.com/<downloadToken>/PROD/COMP/VCENTER/vmw/8d167796-34d5-4899-be0a-6daade4005a3/8.0.3.00500/package-pool/155c73ec8a8de71373b88686fddbe039e9a93649d8d1de5abe8257cc91f61d56.blob

 Note: It is important to test all 4 URL's when troubleshooting. In rare cases, a siteID may only have a license for either vCenter or ESXi. Testing all four can help isolate which license version or product may be missing in the siteID.

Warning: Tokens will not work for a short duration after creation. If a token is tested too soon, it will return "Not Entitled".

 

A list of potential status codes from the browser are below:

Scenarios	Status Code
Token expired	401
Invalid token provided	403
Token not provided	403
Invalid file path provided	403
Not Entitled	403
File not found in bucket	404
Except above, rest all scenarios would be	200

Token expired - Status Code 401 

Check that the site ID tied to the token has a valid active contract.

1. Obtain the site ID used when generating the token.
2. Lookup the site ID in the Support Portal / My Entitlements Portal.
3. Expand the product the user is attempting to configure their download token with and click the Licensing icon.
   
   
   
   
4. Search for the product serial number or license key to confirm which version they are currently entitled to.
   
   

Invalid Token provided - Status Code 403 

Check that the syntax for the token is correct.

Not Entitled - Status Code 403 

1. Check that the site ID tied to the token has a valid active contract. 
2. Ensure that license keys exist for the versions downloaded. For example, if the contract only has vSphere 8.x keys and the token is used on vSphere 7.x, then downloads will fail. For instructions on upgrading / downgrade VMware license keys click HERE.

Additional Information

For additional information regarding Download Tokens click HERE.