Windows Server 2003 and SHA256 SSL Certificates

Tony Williams

Recently, Google and Microsoft announced that they were sunsetting the SHA1 algorithm for SSL certificates. Our hosting administrators are currently working to update all SSL certificates from SHA1 to SHA256.



This update not only includes the SSL certificates for our clients' hosted websites here at Blackbaud but also services which connect with Blackbaud NetCommunity and other Blackbaud products. This includes the Blackbaud email service URL.



For clients still using Windows Server 2003, a known issue prevents the server from interpreting the SHA256 algorithm. This only impacts Windows Server 2003. This may result in a error when trying to send email from Blackbaud NetCommunity. Microsoft released a hotfix which corrects the issue and allows Windows Server 2003 to successfully interpret SHA256.



Please navigate here to download and install the hotfix on the Blackbaud NetCommunity webserver. Note: We provide links to third-party websites in an effort to help you resolve your issue. We are not responsible for the information on third-party websites, and we cannot assist in implementing the solutions on these websites.