The Everywhere Configuration tool should create certificates with an SHA256 algorithm instead of using SHA1

The Everywhere Configuration tool should create certificates with an SHA256 algorithm instead of using SHA1

Summary

Software companies often encourage the the use of current standards in IT security, by stopping the support of plugins, software or other mechanisms. This should avoid that users are exposed to common exploits and corrupt software. With the year 2016, Microsoft does not support the use of SHA1 algorithms in SSL certificates anymore, which is why we adapted the Everywhere Configuraion tool to the use SHA256.

Description

Software companies often encourage the the use of current standards in IT security, by stopping the support of plugins, software or other mechanisms. This should avoid that users are exposed to common exploits and corrupt software. With the year 2016, Microsoft does not support the use of SHA1 algorithms in SSL certificates anymore, which is why we adapted the Everywhere Configuraion tool to the use SHA256.

Solution

Self-signed certificates created by the Everywhere Configuration tool are now using the recent SHA256 algorithm. The process in order to create the certificate is still the same, no additional configurations have to be made.

Information

It is possible to install and use other certificates than those generated by the Everywhere Configuration tool. To use a specific certificate for the Everywhere server, it has to be added to the "Personal Certificates"on the local machine. Over the "Manage Computer Certificates" shortcut in the control panel or by typing "certlm.msc" ("mmc.exe" Windows 7) in the microsoft "run" window, the installed certificates can be managed. When "mmc.exe" is used, the Certificates Snap-In has to be added over the File menu.
Each item in the personal certificates directory will be available for selection in the Everywhere Configuration tool.

Issue Number: 35482
Fixed on Date: 5.11.2016
Versions: 7.50 0 BUILD 25796