Not Monitored
Tag not monitored by Microsoft.
38,659 questions
Is a SHA2 CA backwards compatible?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(137.6, 15%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJB%3C/text%3E%3C/svg%3E)
Janus Bariñan
1,126
Reputation points
Hi,
If I build a SHA2 CA can I create a template that supports SHA1?
Should the http and ldap cdp and aia be on a separate server? Does it really need iis?
Design 1
Can I build a standalone Root CA that is SHA1 while having a subordinate ent. CA which is SHA2? The standalone root CA will issue certificates for sha1 application and subordinate enterprise CA for sha2 apps. Or this setup has a security flaw?
Design 2
Design 3
Which Design is better?
Sign in to answer