Performing sync update on vCenter configured with UMDS fails with error: "A general system error occurred. A depot is inaccessible or has invalid contents"

Products

• VMware vCenter Server 8.0

Issue/Introduction

• Sync updates task fails with error: A depot is inaccessible or has invalid contents. Make sure an official depot source is used and verify connection to the depot.

         

• This issue was observed when UMDS is configured.
• vmware-vum-server.log reports below errors, path:  /var/log/vmware/vmware-updatemgr/vum-server/vmware-vum-server.log

YYYY-MM-DD  HH:MM:SS.877Z error vmware-vum-server[2795871] [Originator@6876 sub=ServiceProvider] [EmbeddedPyServiceProvider 1584] Failed to validate depots: https://xxx.xml       
YYYY-MM-DD  HH:MM:SS.883Z error vmware-vum-server[2795871] [Originator@6876 sub=com.vmware.vcIntegrity.lifecycle.SyncDepotsTask] [SyncDepotsTask 221] Failed to sync depots. Merged depot content is invalid: Error:
-->    com.vmware.vapi.std.errors.error
--> Messages:
-->    com.vmware.vcIntegrity.lifecycle.depotContent.ValidationError<A depot is inaccessible or has invalid contents. Make sure an official depot source is used and verify connection to the depot.>

• imageservice.log reports below error: Path: /var/log/vmware/vmware-updatemgr/vum-server/imageservice.log

YYYY-MM-DD  HH:MM:SS,758 INFO imageService[140682020251200] [Downloader 485] Opening https://xxx__hostupdate20-consolidated-index__.xml for download
YYYY-MM-DD  HH:MM:SS,790 WARNING imageService[140682020251200] [Downloader 214] Download failed: ('https:/xxx hostupdate20-consolidated-index__.xml', '', "HTTPSConnectionPool(host='umds.thermofisher.com', port=443): Max retries exceeded with url: /umds/hostupdate/__hostupdate20-consolidated-index__.xml (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1007)')))"), 9 retry left...
YYYYY-MM-DD  HH:MM:SS,801 WARNING imageService[140682020251200] [Downloader 214] Download failed: ('https://xxxhostupdate20-consolidated-index__.xml', '', "HTTPSConnectionPool(host='umds.thermofisher.com', port=443): Max retries exceeded with url: /umds/hostupdate/__hostupdate20-consolidated-index__.xml (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self-signed certificate in certificate chain (_ssl.c:1007)')))"), 8 retry left...
YYYY-MM-DD  HH:MM:SS,812 WARNING imageService[140682020251200] [Downloader 214] Download failed: 

Environment

vCenter Server 7.x

vCenter Server 8.x

Cause

The issue occurs when the root certificate from UMDS is missing on vCenter TRUSTED ROOTS store.

Resolution

To resolve this issue add/publish the UMDS root certificate on the vCenter server. Refer this KB Steps to add a Trusted Root Certificate to the Certificate Store