How do i check if my certificate is SHA2 or SHA256 based?

Article ID: 14172396

Question

How do i check if my certificate is SHA2 or SHA256 based?

Facts

Unable to connect to a website, remote desktop connection, exchange server, or other certificate authentication based service. Uncertainty whether the certificate is SHA2 based.

Answer

  1. Open your certificate in Windows and switch to the Details tab
  2. Check the following Fields in the Field/Value area
    • “Signature algorithm”
    • “Signature Hash Algorithm”
    • “Thumbprint Algorithm”
  3. If any of the values for the “Value” property reads “SHA2” or “SHA256” or “SHA2RSA” or “SHA256RSA”:
    • In order for this certificate to work you must have one of the following OS versions on your device:
      • Windows CE6 or Windows CE7: Check: Start > Settings > Control Panel > System
      • Windows Embedded Handheld Build 29299 or later. Check: Start > Settings > System > About
    • If you are running one of these operating systems, you are SHA2 ready and you can proceed with the next step.
    • If you are running Pocket PC, Windows CE5, Windows Mobile 5.0
      • You cannot use this certificate on your device
      • If today is before January 1 2016 you will can possibly change your application’s certificate to SHA1 to allow your device to continue to work. Contact your server or application administrator to work with them to make this change. Zebra Support cannot assist you with this change.
    • If you are running Windows Mobile 6.1
      • Download the update to Windows Mobile 6.5, and then update again using the update in the next step. You must update in this sequence or the Windows Embedded Handheld update in the next step will fail.
      • Update your device following the Installation Instructions in the release notes.
    • If you are running a Windows Mobile 6.5 or Windows Embedded Handheld and you are running a build earlier than 29299:
      • You will need to update your device to an OS version on the product page for your device that has a DATE CREATED after December 1 2014
      • If there are no OSUpdates available that have a DATE CREATED after December 1 2014, find a download that has “SHA2 Support” in the title, there are several OSUpdates contained in this article which will include one for your device.
      • Update your device following the Installation Instructions in the release notes.