14.2.4 and newer versions
14.3.1 and newer versions
When enrolling a SHA256 certificate with Thwate there we can either choose to chain up to a SHA1 or SHA256 Root. This article describes how to configure this.
When manually enrolling a certificate the setting in Thawte portal looks this:
In Venafi Trust Protection Platform this setting is controlled on the Thawte Certificate Authority Templates. The setting is called “Signature Algorithm”:
SHA256 = Chains to SHA1
SHA256FullChain = Chains to SHA256