Unable to download VMware VCSA iso from online depot

Products

• VMware SDDC Manager

Issue/Introduction

During the deployment of VCF 9.0, the ISO for vCenter fails to be downloaded from the Online Depot  

A token has been created for use with the Broadcom portal and works as expected.

A curl to dl.broadcom.com over port 443 succeeds from the installer appliance.

When attempting to curl for the VCSA ISO specifically, we receive a failed connection error:

curl -X GET https://dl.broadcom.com:443/<token>/PROD/COMP/VCENTER/VMware-VCSA-all-9.0.0.0.24755230.iso -o 9.0vcsa.iso -kvvv
.
.
curl: (60) SSL certificate problem: unable to get local issuer certificate

All other bundles within Bundle Management are successfully downloaded and only the vCenter Server ISO is failing

From the lcm-debug.log file, you see an error similar to the following: 

####-##-##T##:##:##.###+#### ERROR [vcf_lcm,0000000000000000,0000,bundleId=c90008b8-3e0d-5556-a264-3cfdb4367286] [c.v.e.s.l.b.d.d.DepotBundleDownloadServiceImpl,Bundle-Downloader-2] Got Http error[403] while downloading bundle [/COMP/VCENTER/VMware-VCSA-all-9.0.0.0.24755230.iso]
2025-07-01T14:51:14.006+0000 ERROR [vcf_lcm,0000000000000000,0000] [c.v.e.s.l.s.i.BundleDownloadExceptionHandlerImpl,Bundle-Downloader-2] Bundle download failed
com.vmware.evo.sddc.lcm.model.depot.exception.BundleDownloadFailureException: Error [403] downloading bundle [/COMP/VCENTER/VMware-VCSA-all-9.0.0.0.24755230.iso] from dl.broadcom.com:443

Environment

VCF 9.0

Cause

This failure can be attributed to a firewall rule that is filtering for specific file extensions.   

Resolution

Review the firewall rules and ensure that the required file extensions listed are OK'd for download from dl.broadcom.com.

.tar
.ova
.iso
.mub