Share via

Windows Server 2016/2012R2 How to add support for certs created with AES256-SHA256

rainmakers 311 Reputation points
2022-10-19T14:39:12.593+00:00

I was wanting to know how to add support for importing pfx certs with AES256-SHA256 encryption vs the older TripleDES-SHA1. i.e. the encryption in the screenshot below when exporting pfx on Windows 10.

It does work on Windows Server 2019 and higher but not on the Windows server 2016/2012R2 versions. As a work around been using the TripleDES-SHA1, but would prefer not to need the work around.

Thanks in advance.

252066-image.png

Windows Server Security
Windows Server Security
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
1,834 questions
0 comments
Accepted answer
  1. Vadims Podāns 9,121 Reputation points MVP
    2022-10-19T15:00:56.103+00:00

    Windows Server 2012 R2 and Windows Server 2016 operating system will never receive AES256-SHA256 algorithm support for PFX certificates.

    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jim Estabrook 0 Reputation points
    2023-06-23T18:59:22.63+00:00

    I found myself at this location. After some further digging, I found the following information that you may find helpful.

    https://medium.com/@yildirimabdrhm/how-to-create-sha256-csr-on-windows-739cba893fae

    this method does mention an alternative method using OpenSSL. I was able to generate the request using MMC as the article discusses.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.