Cannot add policy Routes with the message "Policy Route(s) configuration is not supported for this site"

Products

• VMware HCX

Issue/Introduction

• When attempting to add an HCX Mobility Optimized Networking Policy Routes via the HCX Manager UI -> Network Extension -> Advanced -> Policy Routes, the following message is displayed: "No Policy Route Redirection Rules Found" and the message: "Policy Route(s) configuration is not supported for this site":
  
• In the /common/logs/admin/web.log of the destination HCX Manager, similar error messages are observed:
  

  2025-03-26 12:23:39.184 UTC [https-jsse-nio-8443-exec-1, Ent: HybridityAdmin, , TxId: TxId: ########-####-####-####-##########] ERROR o.a.c.c.C.[.[.[.[dispatcherServlet]- Servlet.service() for servlet [dispatcherServlet] in context with path [] threw exception [Request processing failed; nested exception is java.lang.RuntimeException: Configuring Policy Routes on this site is not supported.] with root cause
  java.lang.RuntimeException: Configuring Policy Routes on this site is not supported.

• In the /common/logs/admin/web.log from HCX Connector, the following error can be observed:
  

  2024-12-27 14:43:15.745 UTC [https-jsse-nio-8443-exec-3, Ent: DEFAULT, , TxId: TxId: cd8fb4e0-beeb-4339-a98f-f7e4d4ccc1f6] WARN c.v.v.h.inventory.InventoryAdapter- Can not collect resources from the cloud: https://<HCX Manager FQDN/IP> com.vmware.vchs.hybridity.adapters.https.UntrustedCertificateException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Environment

VMware HCX 

Cause

Multiple reasons can cause this error:

1. HCX Manager certificate was changed, and site pairing was not reconnected. 
2. The first connected site does not have an HCX Enterprise License, which is required for the HCX MON policies.

 

Resolution

• For the certificate error/site pairing:
  • Add the destination SSL certificate to the source HCX manager trusted CA. For more information, access: Importing Trusted Certificates from a Remote Site
  • Edit the Site Pairing and insert the credentials again to refresh the connection. Steps to Edit a Site Pair.
    
    
• For the Licensing
  • If you are running HCX versions below 4.11, a specific requirement is that the HCX Enterprise License must be applied.
  • Starting with HCX 4.11, all Enterprise features are enabled by default. Therefore, you can upgrade to version 4.11 even if the first site only has the Advanced license, not the Enterprise license.