Make sure in each appliance
hostname with domain name
NTP
DNS
Routes to all subnets
Assuming you cloned the Primary VM to Passive and Witness (not automatically)
if everything fine till now. run tail -f log on primary and passive nodes, you will see error in Hearbeat communication.