vSphere Lifecycle Manager (VLCM) Plug-in Fails to download in vCenter Server 8.0 U3d

Products

• VMware vSphere ESXi

Issue/Introduction

• vSphere Lifecycle Manager plug-in show error under vSphere Client → Administration → Solutions → Client Plugins
• Error Downloading plug-in. URL is unreachable. Unexpected_message(10); Unsupported UNKNOWN(72)

• The vCenter daemon log, /var/log/vmware/vsphere-ui/logs/vsphere_client_virgo.log, contains entries similar:

  [[timestamp]] [ERROR] sdk-plugin-deployer-3288 com.vmware.vise.plugin.extension.VcExtensionManager Downloading plugin package: 'com.vmware.vlcm.client:8.0.3.24322831' registered in vCenter: '<vCenter> (800f9c69-aa2f-4af1-a44c-3ee7f88a0642)' has failed. java.util.concurrent.CompletionException: com.vmware.vise.plugin.download.PluginDownloadException: org.bouncycastle.tls.TlsFatalAlert: unexpected_message(10); Unsupported UNKNOWN(72)
  [[timestamp]] [INFO ] sdk-plugin-deployer-3288 com.vmware.vise.plugin.registry.VcExtensionStateRegistry Updating entry: Plugin: 'com.vmware.vlcm.client:8.0.3.24322831', State: 'FAILED_DOWNLOAD'

Environment

vCenter Server 8.0U 3d

Cause

• The system attempted to download the plug-in package over port 9084, which returned error. 
• A mismatch between the port configuration and Lookup Service registration caused the plug-in retrieval to fail.

Resolution

Validate if the plug-in can be downloaded

1. Open a browser and try accessing the following URLs:
   • Internal (HTTP): 
     

     http://<vcenter>:9084/vci/downloads/vlcm-ui/plugin.zip

   • External (HTTPS): 
     

     https://<vcenter>:9087/vci/downloads/vlcm-ui/plugin.zip

2. If the plug-in file downloads successfully, the service is functioning.
3. If the download fails, proceed to verify and correct the port configuration.
   
   

Correcting Port Configuration

1. SSH to the vCenter Server Appliance.
2. Back up the vci-integrity.xml file:

   cp /usr/lib/vmware-updatemgr/bin/vci-integrity.xml /usr/lib/vmware-updatemgr/bin/vci-integrity.xml.bak

3. Edit vci-integrity.xml and change the WebSSLPort from 9084 to 9087.
4. Validate the change:

   less /usr/lib/vmware-updatemgr/bin/vci-integrity.xml | grep 9087

5. Restart the services:

   service-control --restart updatemgr vsphere-ui

6. Confirm that the plug-in now downloads without errors.

 

Verify Port Configuration in the VCDB:

1. Switch to the updatemgr user:
   

   su updatemgr -s /bin/bash
   

2. Connect to the VCDB:
   

   psql -U vumuser -d VCDB 

3. Find the vumuser VCDB password at /usr/lib/vmware-updatemgr/bin/configvalues.txt
4. Run the following query:
   

   SELECT name,value FROM vumdbc.VCI_PARAMETERS WHERE name like 'registry.servicePorts.%'; 

Expected output example: