current limitations SHA1 and 8082 to sign

[murraya]

Hi, had an interesting install, fully virtual OT/OXE/OMS. all soft clients and mobile clients. The install was in a remote city so never went to site.

issue 1: how do you sign the external cert? normally get generate in OT export, customer gets it signed (external authority) then import back and sign with the 8082.
no 8082 on site so needed to use lab one. sounds ok but this was a remote install so how can you sign it?
Fix was to go to a site that could get a vpn setup to the client (govt dept so not possible from just anywhere) then use the phone to sign.
anyone got another way?
is there a software version of 8082 that lets you sign over RDP?

issue 2: customer wanted to purchase 3 year cert but couldn't as the 8082 can't sign SHA2 only SHA1. SHA1 is not possible after 1 jan 2016 so signing authority would not issue SHA1 for 3 years.
anyone else face that?

I feel a couple of PER's being lodged with Alcatel.