VCF 9.1 Bundle Download Fails with TlsNoCloseNotifyException

Products

• VMware SDDC Manager / VCF Installer

Issue/Introduction

When attempting to download "SDDC Manager Updates" in VCF Operations, the download task remains stuck at 0% for hours before failing. The user interface logs the error Download failed because of TlsNoCloseNotifyException.

Review of the logs /var/log/vmware/vcf/lcm/lcm-debug.log reveals that the Lifecycle Management (LCM) service fails during the download execution payload with an underlying validation error: curl_easy_perform() failed: cURL Error: SSL peer certificate or SSH remote key was not OK, SSL certificate problem: unable to get local issuer certificate

 

Environment

VMware Cloud Foundation 9.1

Cause

Issue with proxy certificates not being correctly added to the trust store in SDDC Manager.

Resolution

Apply steps from KB: How to import Proxy server certificate to SDDC manager trust store.