When trying to renew your SSL certificate for Symantec Endpoint Encryption the renewal CSR is invalid.
This is a known Microsoft issue as noted here - http://support.microsoft.com/kb/971832
As a workaround you will need to generate a certificate as new instead of as a renewal. You will need to create and deploy new Framework to your clients.
Applies To
All versions of Symantec Endpoint Encryption
IIS 7.0