For VMware perpetual licensees without Broadcom support, installing security patches has become more challenging.
Last year, Broadcom assured vSphere customers that security patches for all supported versions would be made available to all customers — even those with expired support contracts.[1] However, on April 8, 2025, the company announced that updates for VMware vSphere ESXi would no longer be downloadable from their public repositories for internet-facing VMware.[2] Instead, VMware security advisories for vSphere now redirect users to a Broadcom support portal page[3], where the download process has become more involved. Specifically, users must obtain tokens[4] linked to corresponding entitlements in the support portal[5] — a convoluted process for what should be a routine security update.
It’s no surprise that a Broadcom support discussion thread has revealed confusion among VMware customers, with many trying to navigate issues related to these tokens and entitlements just to find patches for their software versions.[6]
For non-Broadcom-supported perpetual licensees struggling to maintain VMware security, there’s good news. Though the delivery of Broadcom-provided VMware security patches and updates is becoming increasingly complicated, the delivery of Rimini Street’s hypervisor security solution is simple and direct.
VMware security made easy
Rimini Street offers a hassle-free solution for clients running VMware regardless of their patching strategy. By subscribing to our standard Rimini Support™ for VMware, licenses can access Rimini Protect™ Advanced Hypervisor Security (AHS), powered by Vali Cyber®.
As part of the software delivery process, clients receive a welcome email once the purchase is complete. The welcome letter contains the download links for the individuals authorized to download the software and documentation — a straightforward process.
To summarize:
1. Subscribe to our standard offering for Rimini Support™ for VMware
2. Open welcome email
3. Click on the download links
It truly is that simple.
An effective approach to hypervisor protection
Rimini Protect™ AHS is the industry’s first purpose-built hypervisor security solution. It’s specifically designed to defend against ransomware and other common malware-based attacks targeting Linux-based hypervisors, including VMware ESXi.
Benefits include:
- Exploit protection
- Ransomware protection
- Real-time file remediation/recovery
Additionally, it helps safeguard your hypervisor without downtime or business disruption, enabling you to focus on strategic business initiatives with greater peace of mind.
Rimini Street also offers installation and configuration services following the industry’s best practices and methodologies backed by a team of more than 75 full-time security professionals. Security managed services are available as needed by clients.
Learn more about the Rimini Protect AHS solution and how it serves as a reliable and effective option to help ensure VMware security here.
Content contributed by Kevin Eyre, Sr. Director Product Marketing, Rimini Street
[1] Broadcom: Zero Day (i.e., Critical) Security Patches for vSphere (7.x and 8.x) Perpetual License Customers with Expired Support Contracts
[2] Broadcom: VCF authenticated downloads configuration update instructions
[3] Broadcom: Security Advisories – VMware Cloud Foundation
[4] Virtual Ramblings: Updating ESXi using ESXCLI + Broadcom Tokens
[5] Broadcom: VCF authenticated downloads configuration update instructions
[6] Broadcom Community: VMware vSphere
