SHA 256 and IIS 7.x

[Ed Shirey <elswaretech () gmail com>]

Hi,

I am trying to implement SHA 256 hashing for IIS 7 and IIS7.5 under
Win2k8r2. When I google (and even Bing) for help, I get a variety of
hits, many of which refer to IIS 6, or Win2k3. What I have found
suggests:

- IIS 7.5 should support this out of the box. Yet, when trying to
configure "Machine Key", I see no choice for SHA 2, only SHA 1.
- IIS 7 should support this when .NET 4.0 is installed. After fully
updating the machine, and installing .NET 4, I still see no available
option for SHA 2 for "Machine Key".

I am primarily concerned with hashing right now, not SSL, although I'm
sure a better understanding of how to enforce a strong level of SSL
encryption will likely be good to know (I understand about client
compatibility issues).

The stuff I've found on the net seems to be only slightly relevant to
my platform/needs, and I've not been able to find anything that's
specific and helpful. I have to admit I'm more comfortable with Linux
and Apache than Win/IIS. I suspect my google fu is weak, as it's rare
to not find what you're looking for on so basic a topic.

So my question is: Can someone point me towards some good (definitive)
documentation that explains how to configure IIS7 and/or Win2k8r2 for
SHA 2 (SHA 128/256)?

Thanks!

Ed

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------