Signature check of Main Upgrade Bundle(mub) file failed. Tampering with downloaded bundle is not supported

Products

• VMware NSX

Issue/Introduction

• During NSX upgrade from SDDC Manager, below error could be seen from SDDC GUI

"NSX Upgrade Coordinator - Signature check of Main Upgrade Bundle(mub) file failed. Tampering with downloaded bundle is not supported"

• Below logs could be seen on /var/log/syslog and /var/log/upgrade-coordinator/ respectively

2025-07-05T12:18:14.857Z <nsx-manager> NSX 5409 SYSTEM [nsx@6876 comp="nsx-manager" errorCode="MP30001" level="ERROR" subcomp="upgrade-coor
dinator"] Error while caling uc_helper for verification of Upgrade bundle VMware-NSX-upgrade-bundle-3.2.#.#.0.########.mub. See uc_helper logs
2025-07-05T12:18:14.878Z <nsx-manager> NSX 6489 - [nsx@6876 audit="true" comp="nsx-manager" level="INFO" reqId="66a6acae-647f-498f-8ff4-35d

 

2025-07-05T12:18:16.234Z  INFO http-nio-127.0.0.1-7442-exec-4 UpgradeCoordinatorFacadeImpl 5409 SYSTEM [nsx@6876 comp="nsx-manager" level="INFO" subcomp="upgrade-coordinator"] Get status of upgrade bundle 32###########
2025-07-05T12:18:16.355Z  INFO http-nio-127.0.0.1-7442-exec-4 UpgradeBundleServiceImpl 5409 SYSTEM [nsx@6876 comp="nsx-manager" level="INFO" subcomp="upgrade-coordinator"] Found bundle status file /image/upgrade-coordinator-tomcat/temp/3212020541212.bundle_status for upgrade bundle id 32###########
2025-07-05T12:18:16.356Z  INFO http-nio-127.0.0.1-7442-exec-4 UpgradeBundleServiceImpl 5409 SYSTEM [nsx@6876 comp="nsx-manager" level="INFO" subcomp="upgrade-coordinator"] upgradebundle status is , FAILED, 100.0, signature_not_verified
2025-07-05T12:18:16.356Z  INFO http-nio-127.0.0.1-7442-exec-4 UpgradeCoordinatorFacadeImpl 5409 SYSTEM [nsx@6876 comp="nsx-manager" level="INFO" subcomp="upgrade-coordinator"] Status of upgrade bundle 3212020541212 is FAILED[100.0 %]-Signature check of Main Upgrade Bundle(mub) file failed. Tampering with downloaded bundle is not supported. 

Environment

VMware NSX-T Data Center

VMware NSX

Cause

Unknown Exception error during signature check for the upgrade bundle

Resolution

As a workaround:

(a) Switch the VIP to a different NSX Manager

OR

(b) Try to upload the MUB to a different UA node

If issue persists post the above workarounds, please open a support request with Broadcom. Creating and managing Broadcom support cases