Exchange certificates and SHA256

Hi All,

I need to deploy a SAN certificate for Exchange 2013 using SHA256 as a signing algorithm, the structure has an internal standalone CA. I have been looking around and these are my findings:

1. If you create a CSR request from Exchange it will create an SHA1 request

2. You can create a SHA256 request from Windows certificates mmc using CNG but then OWA and ECP won't work because Exchange 2013 doesn't support CNG keys

Now I was about to:

A. change the signing algorithm on the CA

B. create a SHA256 request from a Linux machine using OpenSSL

I can't believe there's no other way using only MS products, but if there is I couldn't find it.

Any Idea?

Thanks

A.

This post is provided AS IS with no warranties or guarantees, and confers no rights.
~~~
Questo post non fornisce garanzie e non conferisce diritti