Cannot edit a subscribed content library with error InvalidArgument {...} Security policy: is not supported on VC published URL

Products

• VMware vCenter Server

Issue/Introduction

Symptoms:

• You try to edit a Suscribed Content Library in the same vCenter using vSphere Client. Issue is not observed when the subscribed library pointing to an external vCenter is edited.
• You get an error similar to:

  InvalidArgument (com.vmware.vapi.std.errors.invalid_argument) => { messages = [LocalizableMessage (com.vmware.vapi.std.localizable_message) 
  => { id = com.vmware.vdcs.cls-main.security_policy_not_supported_on_vc_published_url, defaultMessage = Security policy: 
  '' is not supported on VC published URL: 'https://<vcenter_FQDN>:443/cls/vcsp/lib/########-####-####-####-############/lib.json'., 
  args = [, https://<vcenter_FQDN>:443/cls/vcsp/lib/########-####-####-####-############/lib.json], params = <null>, localized = <null> }], data = <null>, errorType = INVALID_ARGUMENT

• In content library logs (/var/log/vmware/content-library/cls.log) you see errors similar to:

  <timestamp> | DEBUG  | ########-#######-auto-#####-h5:######## | tomcat-http-15      | ApiMethodSkeleton       | Method com.vmware.content.subscribed_library.update threw an exception
  com.vmware.vapi.std.errors.InvalidArgument: InvalidArgument (com.vmware.vapi.std.errors.invalid_argument) => {
    messages = [LocalizableMessage (com.vmware.vapi.std.localizable_message) => {
    id = com.vmware.vdcs.cls-main.security_policy_not_supported_on_vc_published_url,
    defaultMessage = Security policy: '' is not supported on VC published URL: 'https://<vcenter_fqdn>:443/cls/vcsp/lib/########-####-####-####-############/lib.json'.,
    args = [, https://<vcenter_fqdn>:443/cls/vcsp/lib/########-####-####-####-############/lib.json],
    params = <null>,
    localized = <null>
  }],
    data = <null>,
    errorType = INVALID_ARGUMENT
  }
      at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
      at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
      at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
  <timestamp> | DEBUG  | ########-#######-auto-#####-h5:######## | tomcat-http-15      | ApiMethodSkeleton       | Method implementation threw a VMODL2 error com.vmware.vapi.std.errors.InvalidArgument: InvalidArgument (com.vmware.vapi.std.errors.invalid_argument) => {
    messages = [LocalizableMessage (com.vmware.vapi.std.localizable_message) => {
    id = com.vmware.vdcs.cls-main.security_policy_not_supported_on_vc_published_url,
    defaultMessage = Security policy: '' is not supported on VC published URL: 'https://<vcenter_fqdn>:443/cls/vcsp/lib/########-####-####-####-############/lib.json'.,
    args = [, https://<vcenter_fqdn>:443/cls/vcsp/lib/########-####-####-####-############/lib.json],
    params = <null>,
    localized = <null>
  }],
    data = <null>,
    errorType = INVALID_ARGUMENT
  <timestamp> | DEBUG  | ########-#######-auto-#####-h5:######## | tomcat-http-15      | DiagnosticAsyncHandle     | Invoked API com.vmware.content.subscribed_library.update: took 3 ms

NOTE :The preceding log excerpts are only examples. Date, time and environmental variables may vary depending on your environment

Environment

VMware vCenter Server 7.0.3

Cause

This issue is seen due to "Apply security policy" feature introduced in 7.0 U3.

Resolution

This issue is fixed in vCenter Server 7.0 Update 3d and later versions