Unable to download async patch - 403 Forbidden

Products

• VMware SDDC Manager

Issue/Introduction

After updating VCF to use depot credentials a 403 forbidden error will occur when attempting to download patches.  

 

In the lcm-debug.log you may see an error similar to the following: 

####-##-##T##:##:##.###+#### [pool-11-thread-1] DEBUG [com.vmware.evo.sddc.lcm.bundle.download.depot.DepotDownloader]
                      Getting file size for [/COMP/SDDC_MANAGER_VCF/bundles/bundle-201200.tar] from URL[https://dl.broadcom.com:443/<TOKEN>/PROD/COMP/SDDC_MANAGER_VCF/bundles/bundle-201200.tar]
####-##-##T##:##:##.###+#### [pool-11-thread-1] DEBUG [com.vmware.evo.sddc.lcm.bundle.download.depot.DepotDownloader]
                      Executing HEAD /<TOKEN>/PROD/COMP/SDDC_MANAGER_VCF/bundles/bundle-201200.tar
####-##-##T##:##:##.###+#### [pool-11-thread-1] DEBUG [com.vmware.vcf.secure.truststore.DynamicTrustManager]
                      Checking validity of certificate chain CN=####,CN=####, O=####, C=####,CN=####, O=####, C=####
####-##-##T##:##:##.###+#### [pool-11-thread-1] DEBUG [com.vmware.vcf.secure.truststore.DynamicTrustManager]
                      Certificate chain CN=####,CN=####, O=####, C=####,CN=####, O=####, C=#### is valid
####-##-##T##:##:##.###+#### [pool-11-thread-1] DEBUG [com.vmware.evo.sddc.lcm.bundle.download.depot.DepotDownloader]
                      Got response: 403 Forbidden HTTP/1.1
####-##-##T##:##:##.###+#### [pool-11-thread-1] ERROR [com.vmware.evo.sddc.lcm.bundle.download.depot.DepotDownloader]
                      Error getting file size, got response: 403 Forbidden HTTP/1.1
####-##-##T##:##:##.###+#### [pool-11-thread-1] ERROR [com.vmware.evo.sddc.lcm.bundle.download.depot.DepotBundleDownloadServiceImpl]
                      Got Http error[403] while downloading bundle [/COMP/SDDC_MANAGER_VCF/bundles/bundle-201200.tar]
####-##-##T##:##:##.###+#### [pool-11-thread-1] DEBUG [com.vmware.evo.sddc.lcm.tools.common.BundleDownloadUtil]
                      Failed bundle-201200 download stacktrace
com.vmware.evo.sddc.lcm.model.depot.exception.BundleDownloadFailureException: Error [403] downloading bundle [/COMP/SDDC_MANAGER_VCF/bundles/bundle-201200.tar] from dl.broadcom.com:443

Environment

VCF 4.5.x

 

Cause

The token used is not correct for the customer Site ID.  

Resolution

Confirm the token in use is for the correct Site ID and update the application-asyncpatch.properties file accordingly.     See "ASYNC_PATCH_INPUT_SPEC_DOWNLOAD_FAILED - Ensure the depot credentials provided are correct" AP tool patch enablement fails while trying to connect to online repositories  for more details on updating the file.