Symptoms
A renewal of ENOM SSL subscription failed by timeout (while waiting for the customer to approve the SSL Certificate). The customer appoved the certificate, its status has been checked from the BA control panel, which resulted in the message:
Certificate status not changed. There is a Renewal Order #XXX in Provisioning Failed status, which locks the certificate. Resubmit or cancel the Order to remove the lock. Certificate status is 'Certificate Issued': The SSL Certificate was sent to the customer by email
A renewal order resubmited but instead of checking the previous, already completed on ENOM side, request, a new one has been sent.
Cause
The issue is caused by the bug with id #PBA-63765 ("Duplicate request to renew ENOM certificate is send in case first attempt failed by timeout").
Resolution
The bug is to be fixed in one of the next product updates. Until then do not use the button "Check Status" for the certificates with failed renewal orders, just resubmit a failed order.