Hi There,
I've been following the MS SCCM guides on getting certificates set up for DPs and AMT provisioning:
https://technet.microsoft.com/en-gb/library/gg682023.aspx#BKMK_AMT2008_cm2012
https://technet.microsoft.com/en-gb/library/gg712319.aspx
https://technet.microsoft.com/en-us/library/gg699362.aspx
Key in all of these documents is the requirement that I use the Windows Server 2003 compatible (V2) templates. (it is stated multiple times across all the guides). The trouble is this forces the creation of a certificate using SHA-1, which is now depreciated.
One of the documents says "we recommend you use SHA-2". So how do we do this while using v2 Templates, or do we no longer need to force v2 templates?
I post this in an SCCM forum as it is SCCM/AMT that will be consuming these certificates, the folk in Cert Services forum will have no idea what/why the requirements are as they are, and therefore will be unlikely to be able to provide a solution that will work in this specific case.
Many thanks
Nick