Set up a Enterprise CA for Windows 2012. While generating the initial root CA, SHA512 was selected. This has proven to cause issues with TLS 1.2 that we were unaware of.
I'm trying to generate a new self-signed CA that isn't SHA512. The only options and instructions I can find are for renewing the existing CA which doesn't change the certificate type.
Is there a process for doing this or does CA Services have to removed and reinstalled to generate a new CA?