"Error occurred on the authorization server" when connecting Software Depot on VCF Operations
search cancel

"Error occurred on the authorization server" when connecting Software Depot on VCF Operations

book

Article ID: 446744

calendar_today

Updated On:

Products

VCF Operations

Issue/Introduction

Configuring Software Depot under VCF Operations Build->Software Depot-> Online Depot connection shows error:

Error occurred on the authorization server. Please try again

In the console-log.log located in the SOS bundle under download-service folder show:

2026-06-30T08:46:46.292016919Z stdout F Caused by: com.vmware.evo.sddc.lcm.depot_auth.exceptions.DepotAccessTokenParseException: Unparsable JSON response from Broadcom oAuth authorization server. HTTP Status code: 403; Headers: [Content-Type: text/html, Cache-Control: no-cache, Content-Length: 7445, X-Frame-Options: deny, Proxy-Connection: Keep-Alive], Body: <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
2026-06-30T08:46:46.292026299Z stdout F <html>
2026-06-30T08:46:46.292035709Z stdout F <!-- FileName: index.html

2026-06-30T08:46:46.292244627Z stdout F 
2026-06-30T08:46:46.292252291Z stdout F var Systemname = "";
2026-06-30T08:46:46.292259821Z stdout F var Regel =  "example.system,";
2026-06-30T08:46:46.292453487Z stdout F var Brechtigungsgruppen = Array("Internet_Allow", "Internet_Deny", "P-User-ALL");
2026-06-30T08:46:46.292461143Z stdout F var Gruppen = "";

Environment

VCF Operations 9.1 

Cause

The download_service attempted to fetch an OAuth access token from https://eapi.broadcom.com/vcf/generateToken ([https://eapi.broadcom.com/vcf/generateToken]) to authenticate the depot.
The request was routed through the configured proxy but the proxy server intercepted the request and returned an HTTP 403 Forbidden status code.

Resolution

To resolve this issue, coordinate with network security/firewall team to grant the fleet-depot internet access. Provide them with the following details:

  • Action Required: Whitelist/allow outbound HTTPS (Port 443) traffic through the proxy for the fleet-depot.
  • Destination URL: https://eapi.broadcom.com([https://eapi.broadcom.com|https://eapi.broadcom.com/]) (and generally *.broadcom.com for VCF depot functionality)
  • Proxy Rule to Modify: Look into the policy rule named example.system (as seen in logs) and add the blocked system to an exclusion/allow list (such as the Internet_Allow group seen in the logs).
Powered by Wolken Software