This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(179.20000000000002, 69%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETD%3C/text%3E%3C/svg%3E)
Hi Guys,
1) Does this SharePoint service cert get installed with SharePoint installation?
2) Can we change the algorithm of the cert from SHA1 to SHA2 and then re-upload in CA in each SP server?
3) The SharePoint web service web site is not attached to any cert for port 32844, is there any reason for that? Should we attach a certificate?
Hi @Tanmoy Das
1)No. This is manually added after installation.
2)As long as you don't have any SHA-2 incompatible clients, it should not be an issue.
3)Not needed.
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Hi,
1) I have never added any cert manually in Certificate store called SharePoint services, are you sure it gets manually added? I doubt that.
2) Can anyone explain to me please why the SharePoint web services site does not require the certificate binding?
Hi @Tanmoy Das
1)Microsoft SharePoint server does not include a GUI for installing the SSL Certificate.
https://www.digicert.com/kb/ssl-certificate-installation-microsoft-sharepoint-2013.htm
2)You can refer to the below article:
https://social.technet.microsoft.com/Forums/lync/en-US/fd2eccfd-6fe2-4bc3-bea7-d564a064ca79/which-ssl-certificate-should-be-assigned-to-the-sharepoint-web-services?forum=sharepointadmin
Hi,
I am not talking about any SharePoint web application related certificate. I am talking about the SharePoint web services certificate.
I just checked a new farm after installing SharePoint.
The SharePoint services certificate was there in the certificate store under the SharePoint folder. No one uploaded that manually.
So how did that get added into that folder?
So that was my question?
I think with SharePoint installation, security token cert, SharePoint services cert get added to the certificate store under SharePoint folder, is not it?
The out of the box certificate is provisioned during farm creation/join. It provisions the SharePoint node under the Local Machine cert store as well as the SSL cert you see there.
Security team raised a concern with SHA1
1) Should we and can we update that SharePoint services certificate with SHA2 algorithm?
Hi @Tanmoy Das
As I said before, as long as you don't have any SHA-2 incompatible clients, it should not be an issue
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(70.4, 97%, 16%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAS%3C/text%3E%3C/svg%3E)
I have a similar situation that we need to remediate these certificates to SHA256 from SHA-1
Do we have any remediation steps available for this exercise?
Did you get any resolution for your issue mate? I have a similar situation as yours. Please advise if you have got any solution