Login to one of the SupervisorControlPlaneVMs and run:
kubectl rollout restart deployment vsphere-csi-controller -n vmware-system-csi
this will regenerate Workload Storage User password which is stored in vsphere-config-secret in the same namespace.
This resolved my issue with PVC not bounding to PV, which was failing to be created due to Not Authenticated error.
In my case I was creating Tanzu cluster with additional storage for containerd.