SHA-2 certificates are supported for use with Secure Gateway 3.3.

As of this writing, the following Citrix products have been validated to support SHA-2 certificates:

• Secure Gateway 3.3.4 <CTX202520 (English) CTX202522 (Japanese)>
• XenApp 6.5 with Hotfix Hotfix XA650R06W2K8R2X64023 <CTX213173>
• Web interface 5.4.2.59 with the below mentioned configurations for different XML transport types.

• For SSL Relay: Request and apply a private update as described in CTX139047.
• For HTTPS:

1. Request and apply a private update as described in CTX139047.
2. Share the XML port with IIS either by following the instructions in CTX125107  or during the XenApp installation itself.
   Important! Make sure to use port 443 as the XML port and HTTPS bindings in IIS.

CTX104182 - Receiver - Client Feature Matrix
CTX139047 - Users Unable to Logon to Web Interface 5.4 When Using SSL Relay with SHA-2 (SHA256) Certificates
CTX125107 -  How to Configure XML Service to Share Port with IIS on Windows Server 2008