Online Depot fails to connect in VMware Cloud Foundation 9.1

Products

• VCF Operations

Issue/Introduction

When attempting to configure or synchronize the Online Depot in VMware Cloud Foundation (VCF), the connection fails to establish. The Software Depot appears as "Disconnected."

• VCF Fleet Management (software depot) cannot reach https://dl.broadcom.com.
• Other appliances in the same subnet (e.g., VCF Ops) may have successful connectivity.
• The issue persists even after verifying that all Fleet Management service networks are whitelisted at the perimeter firewall.

Environment

• VMware Cloud Foundation 9.1
• NSX Management Plane

Cause

The issue is caused by a transient state, caching issue, or network profile synchronization failure within the NSX logical networking layer. The NSX management plane may fail to push the correct state to the transport nodes, intercepting outbound traffic from Fleet deployment pods.

Resolution

Ensure the following endpoints are whitelisted for all VCF Operations control plane and worker node IPs:

• eapi.broadcom.com
• dl.broadcom.com
• vvs.broadcom.com
• vsanhealth.vmware.com

To resolve this issue, force a state synchronization in NSX by toggling the IP-Discovery profile properties:

1. Log in to the NSX Manager UI.
2. Navigate to Networking > Segments > Profiles (or the relevant Transport Zone profile section depending on the NSX version).
3. Locate the active IP-Discovery Profile bound to the management components.
4. Modify a configuration setting within the profile, such as toggling the Trust on First Use (TOFU) option, or update an unimpactful field to trigger a profile rewrite.
5. Save the configuration to force NSX to push a state update across the management plane.
6. Verify that the Online Depot in SDDC Manager can now successfully connect.
7. (Optional) Revert the modified IP-Discovery profile setting back to its baseline value. The connection should remain stable as the stale network state has been cleared.