Being connected directly to the Enterprise Manager, all the Configuration Policies appear with a red arrow, which indicate that the policy is inherited, but this is not right, because the DSM Explorer is being opened directly on the EM.
Additionally, all policies can't be Sealed or Un-sealed, even a policy recently created:
Client Automation 14.0 and above
The problem here is due to the Enterprise Manager 'thinks' it's a Domain Manager. This could be caused by an issue with the configuration parameter on the Enterprise Manager.
In order to solve this, the following can be made in order to reset the config parameter on the EM:
caf stop
ccnfcmda -cmd SetParameterValue -ps itrm/adminconsole -pn manager -v "Enterprise_Manager_FQDN" (without double quotes)
caf start