Downloading bundles via SDDC Manager gives 403 Forbidden error
search cancel

Downloading bundles via SDDC Manager gives 403 Forbidden error

book

Article ID: 395734

calendar_today

Updated On:

Products

VMware SDDC Manager

Issue/Introduction

After the update to the use of Tokens, users can not download bundles via SDDC Manager UI, OBTU and even using wget commands

Environment

VCF 5.x

VCF 4.x

Cause

For downloading via SDDC Manager UI -

lcm.log:

YYYY-MM-DDTHH:MM:SS.XXXX DEBUG [vcf_lcm,xxxxxxxxxxxxxxxx,f006,bundleId=d50f0f30-4178-4819-b263-e849f8cbe600] [c.v.e.s.l.b.d.depot.DepotDownloader
,Scheduled-9] Getting file size for [/COMP/SDDC_MANAGER_VCF/bundles/bundle-202281.tar] from  URL[https://dl.broadcom.com:443/<token>/PROD/COMP/SDDC_MANAGER_VCF/bundles/bundle-202281.tar]
YYYY-MM-DDTHH:MM:SS.XXXX DEBUG [vcf_lcm,xxxxxxxxxxxxxxxx,f006,bundleId=d50f0f30-4178-4819-b263-e849f8cbe600] [c.v.e.s.l.b.d.depot.DepotDownloader
,Scheduled-9] Got response: 403 Forbidden HTTP/1.1
YYYY-MM-DDTHH:MM:SS.XXXX ERROR [vcf_lcm,xxxxxxxxxxxxxxxx,f006,bundleId=d50f0f30-4178-4819-b263-e849f8cbe600] [c.v.e.s.l.b.d.depot.DepotDownloader
,Scheduled-9] Error getting file size, got response: 403 Forbidden HTTP/1.1
YYYY-MM-DDTHH:MM:SS.XXXX ERROR [vcf_lcm,xxxxxxxxxxxxxxxx,f006,bundleId=d50f0f30-4178-4819-b263-e849f8cbe600] [c.v.e.s.l.b.d.d.DepotBundleDownloadServiceImpl,Scheduled-9] Got Http error[403] while downloading bundle [/COMP/SDDC_MANAGER_VCF/bundles/bundle-202281.tar]
YYYY-MM-DDTHH:MM:SS.XXXX ERROR [vcf_lcm,xxxxxxxxxxxxxxxx,f006] [c.v.e.s.l.s.i.BundleDownloadExceptionHandlerImpl,Scheduled-9] Bundle download failed
com.vmware.evo.sddc.lcm.model.depot.exception.BundleDownloadFailureException: Error [403] downloading bundle [/COMP/SDDC_MANAGER_VCF/bundles/bundle-202281.tar] from dl.broadcom.com:443

Using wget:

root@bhr-vcf-vcf [ /home/vcf ]# wget -v -e use_proxy=no --user=USERNAME --ask-password https://dl.broadcom.com:443/<token>/PROD/COMP/SDDC_MANAGER_VCF/bundles/bundle-202281.tar
Password for user 'USERNAME':
--YYYY-MM-DDTHH:MM:SS.XXXX--  https://dl.broadcom.com/<token>/PROD/COMP/SDDC_MANAGER_VCF/bundles/bundle-202281.tar
Resolving dl.broadcom.com... 162.159.140.167, 172.66.0.165, 2606:4700:7::a5, ...
Connecting to dl.broadcom.com|162.159.140.167|:443... connected.
HTTP request sent, awaiting response... 403 Forbidden
YYYY-MM-DDTHH:MM:SS.XXXX ERROR 403: Forbidden.

Using OBTU:

Downloading bundle: bundle-202281
Error getting file size, got response: 403 Forbidden HTTP/1.1
Got Http error[403] while downloading bundle [/COMP/SDDC_MANAGER_VCF/bundles/bundle-202281.tar]
Error in reading the bundle in index file Error [403] downloading bundle [/COMP/SDDC_MANAGER_VCF/bundles/bundle-202281.tar] from dl.broadcom.com:443
2025-04-25T13:15:17.452+01:00  INFO   --- [           main] com.vmware.vipclient.i18n.VIPCfg         : Formatting cache created.Formatting cache created.
2025-04-25T13:15:17.454+01:00  INFO   --- [           main] com.vmware.vipclient.i18n.VIPCfg         : Translation Cache created.Translation Cache created.
Bundle Transfer Utility Tool failed with error : Error [403] downloading bundle [/COMP/SDDC_MANAGER_VCF/bundles/bundle-202281.tar] from dl.broadcom.com:443

Resolution

The user account that created the token was not linked to a Site ID on the customers side that had VCF entitlements, therefore they could not download the bundle as they have no entitlements to download.

If this is the case they can request that additional Site IDs be added to their Profile on the Broadcom portal using - Adding additional Broadcom Site IDs to an existing profile on the Broadcom Support Portal

Once the user account then has product admin rights you should be able to generate a new token for this site that has VCF entitlements associated and be able to download bundles.

Additional Information

You might see the same 403 error if the location has not been updated properly or you have not removed the old values from the /opt/vmware/vcf/lcm/lcm-app/conf/application-prod.properties

Example: 

Error getting filesize, got response: 403 Forbidden Got Http error[403] while downloading LCM Product Version Catalog [/evo/vmw/lcm/productVersionCatalog/v1/productVersionCatalog.json] Error occurred fetching product version catalog file from depot

here, LCM service is attempting to access the old depot path /evo/vmw/lcm/productVersionCatalog which should have been /COMP/SDDC_MANAGER_VCF/lcm/productVersionCatalog

Validate all the correct values are updates by running 

grep lcm.depot.adapter /opt/vmware/vcf/lcm/lcm-app/conf/application-prod.properties

Cross verify the values with KB for Apply the Token - Manual method

Powered by Wolken Software