"Access denied for the requested URI: /hybridity/api/sessions" when logging into HCX with domain accounts after upgrade

Products

• VMware HCX
• VMware vCenter Server

Issue/Introduction

After upgrading VMware HCX to 4.11.1, domain account authentication fails when attempting to access HCX through either the vCenter HCX plugin or the direct HCX management interface.

The following error message appears when trying to log in with Active Directory domain credentials:

Access denied for the requested URI: /hybridity/api/sessions

The local [email protected] account continues to function normally, but all domain users are unable to authenticate to HCX services.

Environment

VMware HCX

VMware vCenter

Cause

The "Domain Admins" group for the local domain is missing from the vCenter "Administrators" group. This prevents domain users from accessing HCX resources that rely on vCenter authentication, as HCX cannot properly validate domain user permissions against vCenter's permission structure.

Resolution

To restore domain account access to HCX, re-add the Domain Admins group to the vCenter Administrators group:

1. Log in to vCenter Server using the [email protected] account
2. Navigate to Administration > Single Sign-On > Users and Groups
3. Select the Groups tab
4. Locate and select the Administrators group
5. Click Edit
6. In the Edit Group dialog, select the Members tab
7. Click Add to add new members to the group
8. In the Add Members dialog:
   • Change the domain dropdown to your local domain (example.local)
   • Search for and select Domain Admins
   • Click Add
9. Click Save to apply the changes
10. Verify the configuration by attempting to log into HCX using domain credentials through both:
    • The vCenter HCX plugin
    • The direct HCX management interface

Domain users should now be able to authenticate to HCX services successfully.

Additional Information

If the error persists after following these steps, contact Broadcom Support for further assistance.

Please provide the following information when opening a support request with Broadcom for this issue:

• HCX version details (source and target versions)
• vCenter Server version and build information
• Screenshots of the authentication error
• HCX service logs from the affected timeframe
• vCenter Server logs showing authentication attempts