So shortly after configuring an offline root CA and online AD subordiante CA with SHA512 for future proofing. We discovered a thin client vender (teradici zero client with View 6) only supports SHA1 and SHA256.
I am not able to find ANY way configure a template to use SHA256 with any of the CSPs. I tried "certutil -setreg ca\csp\CNGHashAlgorithm 256" however that invalidates the signature for each new certificate generated.
Other than redoing the entire PKI, does anyone have any ideas or paths I can pursue?
Thanks.