First check status of SMS certs on vCSA.
/usr/lib/vmware-vmafd/bin/vecs-cli entry list --store SMS --text | less
If that is expired or old ; you can try below to renew SMS cert only.
/usr/lib/vmware-vmafd/bin/vecs-cli entry delete --store sms --alias sms_self_signed
restart sps services.
service-control --stop vmware-sps
service-control --start vmware-sps
Then take one host as test and put it into maintenance mode and reboot.
Then check the Storage Provider status on VC UI. It should ideally have a new cert.