SHA-2 Suppot for TMG 2010
Will an update be released to support SHA-2 on TMG 2010, or will the end of life of the product be much shooner than the previous 2020 date that was announced?
September 22nd, 2014 5:31pm

Hi,

AFAIk no, because TMG has been discontinued and the statement regarding CNG support in TMG is clear, as the product was in lifecycle:

http://technet.microsoft.com/de-de/library/ee796231.aspx

Free Windows Admin Tool Kit Click here and download it now
September 22nd, 2014 6:31pm

This is not entierly correct. What's true is, that TMG doesn't support CNG, and this support will most likely not be added any more...however we fully support certificates which are issues by CryptoAPI. With CryptoAPI you can also generate certificates with SHA-2 Hash size 256.

  • Proposed as answer by Anders Janson Friday, November 28, 2014 12:23 PM
November 28th, 2014 10:31am

Hi Philipp,

I can confirm that from the real world, I am currently working on deploying "SHA256" certificates to a number of TMG deployments.

As long as you create the cert request correctly, you'll be fine.

Free Windows Admin Tool Kit Click here and download it now
November 28th, 2014 3:23pm

Hi Anders

Could you explain further please? I have a SHA256 cert for a 2008 R2 IIS Server which shows the full chain but installed on TMG it does not show the full chain so I get a chain incomplete error

thanks

February 19th, 2015 5:16pm

I assume that you are talking about web publishing.

Regardless, you need to make sure that in the certificates snap-in for local computer on the TMG server that you can view the entire chain when you look at the certificate used for publishing. If not, then you don't have the root/intermediate certificates correctly installed. This has nothing to do with TMG whatsoever. The server where TMG is installed will not understand what is happening on another server.

Free Windows Admin Tool Kit Click here and download it now
February 20th, 2015 3:30am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics