When trying to renew your SSL certificate for Symantec Endpoint Encryption the renewal CSR is invalid.

This is a known Microsoft issue as noted here - http://support.microsoft.com/kb/971832

As a workaround you will need to generate a certificate as new instead of as a renewal. You will need to create and deploy new Framework to your clients.

Applies To

All versions of Symantec Endpoint Encryption
IIS 7.0