May be because of this?
vShield App install fails in a scenario where one of the hosts is not the part of dvSwitch
vShield service virtual machines install can fail in certain scenarios. Consider a scenario where there are two DRS-enabled clusters in a datacenter and each cluster has two hosts. You create a dvSwitch and add one host from each cluster into the dvSwitch successfully. Now if you deploy a new virtual machine or install vShield Edge with its vnic in the port group of the above created dvSwitch, the virtual machine is not created and the OVF file is not imported.
Workaround: If DRS is enabled, you must add at least two hosts from the same cluster in a dvSwitch.