VMware VUM not updating ESX 6.0 hosts

When I scan hosts in VMware Update Manager (VUM), I get an error - "Host cannot download files from VMware vSphere Update Manager patch store.  Check the network connectivity and firewall setup, and check esxupdate logs for details."

The esxupdate log shows that download from http://<vCenterServer-IP>:9084/vum/repository/hostupdate/vmw/vmw-ESXi-6.0.0-metadata.zip fails. I am attaching the log file.

The vCenter server is listening on port 9084. Updates worked fine a few months ago. What may be missing or misconfigured? Thanks.

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Seems like VUM does not have access to the Internet ?

Firewall changed? do you use a proxy ?

if you test VUM internet connection, does it succeed or fail ?

try again in 24 and 48 hours ?
AkulshAuthor Commented:
By VUM, I think you mean vCenter server since VUM is installed there.
The vCenter server has access to Internet. We don't use proxy and Firewall permits access.
Just now, I went to Admin View of VUM and clicked on Download Now in Config > Download Settings. In Recent Tasks, "Completed" showed up for "Download path definitions".

So I don't think it is an internet connection issue. In fact, I can see all patches listed when I "Stage" a host.
Andrew Hancock (VMware vExpert / EE MVE^2)VMware and Virtualization ConsultantCommented:
Completed, definitely confirms, you have Internet connection.

are you doing any differently to my EE Article

AkulshAuthor Commented:
Sorry for late response.

The problem was with port 9084 of vCenter server which was not open from ESX hosts. Now that it is permitted, updates can be done. Thanks.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
AkulshAuthor Commented:
Even though vCenter was listening on port 9084 all along, ESX hosts were not allowed to reach that port. (Firewall group had blocked that port.)
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.