Problem staging VMWare patches due to SSL inspection


Error:
Download patch definitions
Web sites: 
https://hostupdate.vmware.com/software/VUM/PRODUCTION/main/vmw-depot-index.xml;https://hostupdate.vmware.com/software/VUM/PRODUCTION/cscomain/cscodepot-index.xml; 
hosting the patch definitions and patches cannot be accessed or have no patch data. Check the Internet connectivity.

 Solution:

VMWARE KB:
http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=2009000


Update Manager 5.0 introduces a new setting that verifies the SSL certificates during download. By default, this value is set to 1 or enabled.
 
To disable this behavior:
  1. Click Start > Run, type regedit, and click OK. The Registry Editor window opens.
  2. Navigate to the HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\VMware, Inc.\VMware Update Manager  key. 
  3. Right-click the value of the SslVerifyDownloadCertificate key and click Modify.
  4. Change the Value data field value to 0.
  5. Click OK.
  6. Click Start > Run, type services.msc , and click OK.
  7. Right-click VMware vSphere Update Manager Service and click Restart.   

Solution 2

Trust the certificate for the site that is failing by installing it into the trusted certificate store for the local computer. You could also download and trust the CA certificates that were used in signing the site certificate into the local computer certificate store.
 
You might also want to update the root certificates on the Microsoft Windows operating system. For more information, go to the Microsoft Download Center.

Note: You must download the corresponding version of root certificates for your operating system. For more information, refer to Microsoft support documentation.