ASA Signature algorithm:SHA1 TO SHA256

[shiran.wang]

I want to change my signature algorithm from SHA1 TO SHA256,

my ASA IOS version is 8.4

It is

CSR successfully checked

Signature algorithm:SHA1

Key algorithm:RSA

Key size:2048

to be

Signature algorithm:SHA256

Key algorithm:RSA

Key size:2048

[Karsten Iwen · Accepted solution]

That is not possible on the ASA. Configure your CA to issue SHA256 based certificates regardless of the signature-algorithm of the CSR. The CSR is not used any more after that.