VMware vSAN (All Versions)
This health check verifies that the vSAN HCL DB auto updater works normally and can download and update the vSAN HCL DB from the VMware HCL release website. This check is performed periodically at fixed intervals.
If this check returns a warning, it means that vSAN cannot download and update its HCL DB automatically. The most likely reason is that the vSAN health service in the vCenter server cannot connect to the vSAN HCL release site. This check will not return an error.
To troubleshoot this issue, make sure the following URLs are on the accept list of the vCenter Server firewall rules and any external firewalls:
vsanhealth.vmware.com
eapi.broadcom.com
Note: Ensure port 443 is not blocked by any firewalls to the above URLs.
If the vCenter server cannot access the HCL release site, you can set up a proxy: