Storage Provider Certificate Has Not Expired Yet

Note:

There is currently an issue with the vSphere 7.0 U2 ui in that the renew button is always grayed out. - https://kb.vmware.com/s/article/85328

There is a way to manually refresh the VASA certificates through the Managed Object Browser. You can see how to do that in this blog post.

Another option to approach this will be to treat the certificate as if it was expired. Meaning to reset the certificate on the FlashArray and then re-registering the storage providers.

VMware has said that a fix will be coming in a forthcoming 7.0 U3 release.

If the Storage Provider Certificate is still valid, but is coming close to expiring, then renewing it is easy. The main question that needs to be answered is if the certificate is the default one that VMCA imports when the storage providers are first registered or if the VASA certificate was manually imported by an array admin (this is only possible starting with Purity 5.3.0). This can be checked from the vCenter UI.

Here is how you'll be able to renew the Certificate before it expires.

After logging into the vCenter Server that has the registered Storage Providers with the FlashArray, navigate to the Hosts, VMs, or Storage page and click on the vCenter Server Object.
From the vCenter Server object click on the Configure Tab
In the Configure Tabs sidebar, click on Storage Providers
Select the Storage Provider that you need to refresh or need to check the certificate source
A Yellow Icon will show in the Certificate Expiry column if the cert expires within 180 days
1. The VASA Certificate information can be found on the Certificate Info Tab for the storage Provider
  1. You should check the Subject and Issuer lines in the Certificate information
    1. The default VMCA imported certificate is in use if the Subject O and OU is Everpure and the Issuer OU is VMware Engineering
Click on the ribbon icon to Refresh the Certificate
Verify the Certificate is Refreshed
If the Subject O and OU is not "Pure Storage" and the Issuer is not "VMware Engineering", then this is an imported certificate.

Additionally, you will not be able to refresh/renew the Certificate from vCenter if the certificate is not issued by VMware Engineering.
An Generating and Importing the Certificate.
1. The Storage Providers will need to be re-registered after a new certificate has been imported to VASA.
Repeat the same steps for the other Provider.
After following the previous steps on one vCenter, if you have vCenters in Enhanced Linked Mode (ELM) and they have the storage providers registered on the additional vCenter(s), you have a few options. You can either re-register the storage providers on all ELM vCenters, restart services on the additional vCenter Server(s), or refresh the certificates on the other ELM vCenter(s) as well.
There are no other steps needed once the certificates are updated and/or refreshed.