Error BUNDLE_SIGNATURE_VERIFICATION_FAILED when uploading or downloading with async patch tool

Products

• VMware SDDC Manager

Issue/Introduction

2026-01-21 19:45:41.540 [INFO ] Validating bundle bundle-<ID_number> tar file, manifest file and manifest signature file exist
2026-01-21 19:46:24.934 [INFO ] Validating bundle bundle-<ID_number> signature
2026-01-21 19:46:24.946 [ERROR] Error verifying signature for manifest file /nfs/vmware/vcf/nfs-mount/NSX-T-3.2.4-bundle/apToolBundles/input-<ID_number>-nsx324/manifests/bundle-<ID_number>.manifest error INVALID_UNTRUSTED_CERTIFICATE
2026-01-21 19:46:24.946 [ERROR] Error while initiating required functionality: INPUT_SPEC_WORKFLOW
2026-01-21 19:46:24.954 [ERROR] BUNDLE_SIGNATURE_VERIFICATION_FAILED
-- Error Message: Error verifying manifest signature for bundle bundle-<ID_number>.

Environment

VMware Cloud Foundation 4.5.x

Cause

A corrupted or outdated manifest and signature files can cause the verification failure.

 

Resolution

1. SSH to SDDC Manager with vcf user and then elevate with su to root

2. Edit the LCM application-prod.properties file 
   
   vi /opt/vmware/vcf/lcm/lcm-app/conf/application-prod.properties

3. Edit the below parameters to false 
   
   lcm.depot.adapter.enableBundleSignatureValidation=false

lcm.depot.adapter.enableSignatureValidation=false

4. Press Esc and type :wq! to save

5. Restart LCM service
   
   systemctl restart lcm