Error: Http failure response for <URL>: 504 OK present on Software Depot page of VCF Operations 9.1

Products

• VCF Operations

Issue/Introduction

• The software depot is disconnected in the Build menu of VCF Operations.
• The following error is present on the Software Depot UI page:
  

  Http failure response for https://<REDACTED_HOSTNAME>/vcf-operations/plug/<REDACTED_SECRET>/api/depot/v1/connectivityaction=validateExistingConfiguration: 504 OK

• The vcf-fleet-depot/<node_name>/depot-service-<identifier_string>/download-service/console-log logs show the following errors;
  

  2026-07-30T08:09:41.579750271Z stdout F com.vmware.evo.sddc.common.core.error.InternalServerErrorException: Failed to connect to Broadcom OAuth Authorization server.
  2026-07-30T08:09:41.579753706Z stdout F         at com.vmware.evo.sddc.lcm.tools.downloadservice.validator.DepotConnectionValidator.getAccessToken(DepotConnectionValidator.java:192)
  ...
  2026-07-30T08:09:41.579767587Z stdout F Caused by: com.vmware.evo.sddc.lcm.depot_auth.exceptions.DepotAccessTokenIOException: java.net.SocketException: Network is unreachable

Environment

VMware Cloud Foundation (VCF) 9.1

Cause

One or more addresses in the IP pool assigned to the VCF Services runtime do not have network access to the required whitelisted sites, specifically preventing communication with the Broadcom OAuth Authorization server and 'dl.broadcom.com'.

Network routing firewall restrictions are blocking outbound traffic originating from these specific IPs.

Resolution

1. Identify the IP pool assigned to the VCF Services runtime.

   • Navigate to Build > Lifecycle > Components > VCF services Runtime and scroll down to the 'VCF services runtime IP pool:' to find the IP range available. All must be included.

2. Update the network firewall rules to allow outbound traffic from this specific IP pool to the required Broadcom public URLs.

   • Public URLs Required for Online Functionalities for VCF and vSphere Foundation

3. Verify access to the Online Depot is successfully restored to an active state.

4. Retry the initiation of the patch binary downloads.