By comparing configurations against machines that I hadn't upgraded yet, I noticed that the following registry keys were missing:
HKLM\SOFTWARE\Symantec\ENL\Network.TCPIP -> Gateway (string that points to your CPS's CMS server)
HKLM\SOFTWARE\Symante...