VMware Cloud Foundation Download Tool fails to download VMWARE_COMPAT compatibility data due to missing certificate in trust store

Products

• VMware Cloud Foundation

Issue/Introduction

When trying to use the vcf-download-tool to download binaries to SDDC, the tool can fail, throwing the following error:

*********Welcome to VMware Cloud Foundation Download Tool***********

Version: 9.0.0.0.24703747
Validating depot credentials.
Depot credentials are valid.
Downloading unified release manifest file.
Successfully downloaded unified release manifest file.
Downloading product version catalog file.
Successfully downloaded product version catalog file.
Downloading vSAN HCL file.
vSAN HCL file is up to date, no download required.
Downloading compatibility data.
ERROR: Failed to download VMWARE_COMPAT compatibility data.

Environment

VMware Cloud Foundation 5.x

VMware Cloud Foundation 9.x

Cause

The VMWARE_COMPAT compatibility data failing to download is commonly due to connection issues. To get specifics of the failure, logs such as lcm.log, commonsvc.log, or vdt.log should be reviewed. The following indicates a problem with verifying certificate(s) during a connection attempt:

 

[main] DEBUG [com.vmware.vcf.secure.truststore.DynamicTrustManager]
                      Error checking certificate chain <someURL> for validity.
xxxxx.security.validator.ValidatorException: PKIX path building failed: xxxx.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target.

Resolution

If the error message listed in the Cause section above is referencing "vvs.broadcom.com", then a fresh copy of the Proxy server certificate needs to be imported into the SDDC trust store. Refer to How to import Proxy server certificate to SDDC manager trust store.