"LCMMARKETPLACE13100" error encountered when downloading management packs in VCF Operations

Products

• VCF Operations

Issue/Introduction

• Downloading a management pack from Administration > Integrations > Marketplace fails with the following error code:
  LCMMARKETPLACE13100
  
  
• The failed download tasks are visible in Fleet Management > Lifecycle > Tasks.
  
  
• The /var/log/vrlcm/vmware_vrlcm.log file on the Fleet Management appliance contains connection reset or timeout errors:
  INFO vrlcm[1274] [pool-3-thread-8] [c.v.v.l.c.m.u.MarketPlaceUtil]  -- Get Cloud Marketplace access token -- Start.
INFO vrlcm[1274] [pool-3-thread-8] [c.v.v.l.c.m.u.MarketPlaceUtil]  -- Get Cloud Marketplace access token -- try: 1
INFO vrlcm[1274] [pool-3-thread-8] [c.v.v.l.c.m.u.MarketPlaceUtil]  -- Get access token url: https://console.cloud.vmware.com/csp/gateway/am/api/auth/api-tokens/authorize
INFO vrlcm[1274] [pool-3-thread-8] [c.v.v.l.c.a.InternalOnlyApiAspect]  -- Internal Only Check for: execution(ResponseEntity com.vmware.vrealize.lcm.locker.controller.CredentialController.getPasswordByAlias(String))
ERROR vrlcm[1274] [pool-3-thread-8] [c.v.v.l.c.m.u.MarketPlaceUtil]  -- Error while getting access token: Connection reset
ERROR vrlcm[1274] [pool-3-thread-8] [c.v.v.l.c.m.u.MarketPlaceUtil]  -- Exception occurred ::
java.net.SocketException: Connection reset



• Testing outbound connectivity via SSH from the Fleet Management appliance using curl confirms an active network block:
  
  • curl -v https://console.cloud.vmware.com/csp/gateway/am/api/auth/api-tokens/authorize
* Host console.cloud.vmware.com:443 was resolved.
* IPv6: ##:##::#, ##:##::#
* IPv4: ##.#.#.#, ##.#.#.#
* Trying [##:##::#::1]:443...
* Immediate connect fail for ##:##::#::1: Network is unreachable
* Trying ##.#.#.#:443...
* ALPN: curl offers http/1.1
* TLSv1.3 (OUT), TLS handshake, Client hello (1):
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
* CApath: none
* Recv failure: Connection reset by peer
* TLS connect error: error:00000000:lib(0)::reason(0)
* OpenSSL SSL_connect: Connection reset by peer in connection to console.cloud.vmware.com:443
* closing connection #0
curl: (35) Recv failure: Connection reset by peer

Cause

An internal firewall or proxy blocks the required outbound HTTPS (port 443) traffic from the appliance to Broadcom and VMware servers, resulting in a connection reset.

Resolution

To allow outbound HTTPS (port 443) from the appliance, whitelist the following endpoints on the firewall or proxy:

• https://vcf.broadcom.com

• https://eapi.broadcom.com

• https://api.broadcom.com

• https://dl.broadcom.com

• https://console.cloud.vmware.com




Workaround

If direct internet access cannot be granted immediately, install the management pack manually:

1. Download the required .pak files from the VCF Solutions Catalog  using an internet-connected machine.

2. Log in to the VCF Operations UI.

3. Navigate to Administration > Integrations > Marketplace.

4. Click Upload and Install to upload the downloaded .pak file. For further guidance, refer to Adding and Managing Management Packs from VMware Marketplace