vCenter Update Compatibility Data task fails with error "A general system error occurred: Unable to download the compatibility data from the VMware Verification Service."

Products

• VMware vCenter Server

Issue/Introduction

• vCenter compatibility data bundle download task fails with error: 
  "A general system error occurred: com.vmware.vcIntegreity.lifecycle.scl.VvsInteropBundleDownloadError"
• vLCM logs on vCenter shows below log entries:
  /var/log/vmware/vmware-updatemgr/vum-server/vmware-vum-server.log
"VVS download failed. Message: Error occured while downloading VVS bundle from URL: https:\/\/vvs.broadcom.com\/v1\/products\/bundles\/vlcm-compatibility-data\/v1\/vlcm-interop-vcg-bundle?format=gz. Download error: curl_easy_perform() failed: cURL Error: SSL connect error, Recv failure: Connection reset by peer"YYYY-MM-DD error
vmware-vum-server[2038360] [Originator@6876 sub=HostUpdateDepotManager] [patchDepotManager 2266] Error occured while downloading VVS bundle from URL: https://vvs.broadcom.com/v1/products/bundles/vlcm-compatibility-data/v1/vlcm-interop-vcg-bundle?format=gz. Download error: curl_easy_perform() failed: cURL Error: Timeout was reached, SSL connection timeout
YYYY-MM-DD warning vmware-vum-server[2038360] [Originator@6876 sub=com.vmware.vcIntegrity.hcl. UpdateCompatibilityDataTask] [UpdateCompatibilityDataTask 120] Failed to download VVS consolidated bundle: Error:
--> com.vmware. vapi.std.errors.error
--> Messages:
--> com. vmware.vcIntegrity.lifecycle.scl. VvsInteropBundleDownloadError<Unable to download the compatibility data from the VMware Verification Service.>

ERROR vmware-vum-server #### [vc@#### sub="HostUpdateDepotManager"] [patchDepotManager ####] Error occured while downloading VVS bundle from URL: http://localhost:1080/depot/PROD/COMP/ESX_HOST/patch-store/vvs/vvs-consolidated-bundle.zip. Download error: HTTP Error Code: 403

Environment

• VCF 9.x
• VVF 9.x

Cause

• UMDS or vCenter communicates with Broadcom VVS endpoint vvs.broadcom.com to download vLCM compatibility data bundle
• This failure is observed when internal firewalls are blocking connection to any of these endpoints.

Resolution

Ensure network firewall rules unblock/whitelist the communication from vCenter (and in addition, in the case of VCF 9.1, the VCF Service Runtime Cluster IP range) with the following endpoints:

• vvs.broadcom.com (Broadcom VVS endpoint)
• storage.googleapis.com (Google cloud storage service endpoint)
  
  In an offline (air-gapped) environment, the vCenter Update Compatibility Data task fails because it cannot reach the Broadcom VMware Verification Service (VVS). To update this data manually, you must retrieve the compatibility bundle using a machine with internet access and then import it into the vCenter Server Appliance (VCSA) using the internal HCL  script. - For more details refer to KB - Steps to upgrade manually the VCG database in vCenter Servers without internet connectivity
   

Prerequisites & Warnings

• Root Access: You must have root-level access to the vCenter Server Appliance bash shell.
• Connectivity: A separate machine with internet access is required to download the bundle from Broadcom's endpoints.
• Irreversibility: While updating compatibility data is generally safe, ensure you have a valid file-level backup or snapshot of the vCenter Server before performing manual script operations on the appliance.

Additional Information

See also: Public URL list for SDDC Manager