On April 23 2025, Broadcom deactivated the previous URLs to their public repositories from which the binaries for VCF, vCenter, ESX, and vSAN File Services can be downloaded. The new URLs now must contain customer-specific code. This particularly affects the automatic download of patches.
Broadcom announced two fundamental changes to the way VMware updates are available. First, they will now only be available at dl.broadcom.com, instead of depot.vmware.com, hostupdate.vmware.com, or vapp-updates.vmware.com as before.
Administrators must therefore ensure that the vSphere Lifecycle Manager (vLCM) or VMware Update Manager (VUM), for example, have access to the new address at broadcom.com and, if necessary, enable it in the firewall. Conversely, the previous URLs no longer have any function and can be blocked.
Second, each customer will receive a unique URL in the future – downloading from the public repositories via a general address will no longer be possible. Companies will receive the corresponding token from the Broadcom support portal.
The new URLs then follow this pattern:
https://dl.broadcom.com/<Your_Download_Token>/PROD/COMP/ESX_HOST/main/vmw-depot-index.xml
Read More