VCSA service applmgmt failed to start after upgrade

Products

• VMware vCenter Server

Issue/Introduction

• You recently upgraded the vCenter Server Appliance.
• The service 'applmgmt' failed to start after that.
• The 'applmgmt' log file /var/log/vmware/applmgmt/applmgmt.log may contain below messages:

####-##-##T##:##:##.###Z [25327]INFO:vmware.vapi.provider.local:Registering service: com.vmware.cis.tasks
####-##-##T##:##:##.###Z [25327]ERROR:vmware.vherd.transport.vapi:Was VAPI implementation included in the build? Does /etc/applmgmt/appliance/vapi.properties point to the correct module?
Traceback (most recent call last):
  File "/usr/lib/vmware-vapi/lib/python/vapi_runtime-2.100.0-py2.py3-none-any.whl/vmware/vapi/provider/local.py", line 99, in register_by_properties
    module = __import__(service, globals(), locals(), [fn])
  File "/usr/lib/applmgmt/vapi/py/vmware/vcenter/impl.py", line 15, in <module>
    from vcenter.deployment_impl import VCDPInstallImpl, VCDPUpgradeImpl, \
  File "/usr/lib/applmgmt/vcenter/py/vmware/vcenter/deployment_impl.py", line 29, in <module>
    from .spec_validators import InstallSpecValidator, UpgradeSpecValidator
  File "/usr/lib/applmgmt/vcenter/py/vmware/vcenter/spec_validators.py", line 30, in <module>
    from .network_utils import NetworkUtils, RestClient
  File "/usr/lib/applmgmt/vcenter/py/vmware/vcenter/network_utils.py", line 10, in <module>
    import paramiko
  File "/usr/lib/python3.5/site-packages/paramiko/__init__.py", line 30, in <module>
    from paramiko.transport import SecurityOptions, Transport
  File "/usr/lib/python3.5/site-packages/paramiko/transport.py", line 51, in <module>
    from paramiko.dsskey import DSSKey
  File "/usr/lib/python3.5/site-packages/paramiko/dsskey.py", line 34, in <module>
    from paramiko.pkey import PKey
  File "/usr/lib/python3.5/site-packages/paramiko/pkey.py", line 36, in <module>
    class PKey (object):
  File "/usr/lib/python3.5/site-packages/paramiko/pkey.py", line 43, in PKey
    'AES-128-CBC': {'cipher': AES, 'keysize': 16, 'blocksize': 16, 'mode': AES.MODE_CBC},
AttributeError: module 'Crypto.Cipher.AES' has no attribute 'MODE_CBC'

​​​

Environment

VMware vCenter Server Appliance

Cause

Missing SSL/TLS ciphers will break the internal communication among vCenter server services.

Resolution

If you are encountering the issue, please contact VMware by Broadcom Support for assistance.