I understand that SHA1 will not be supported starting next year 2017 January. My customer who are using the CA with SHA1 would like to migrate to SHA2.
1. How do we migrate the the SHA1 to SHA2. The services which are using this hash is Exchange 2013 and NPS server. Do we need to generate new Certificate at the CA authority server altogether with the SHA2 hash?
2. What are the impacts when migrating the certificates to SHA1 to SHA2
3. Will there any downtime?
Thanks