In the NSX Enforced Mode, that is, by using NSX Tools, you must first onboard VMs by tagging them in the public cloud and installing NSX Tools on them, before starting to manage these VMs using NSX.