Here is [information regarding the Suite B algorithms supported in Windows 2008 and R2][1]


    ALGORITHM                                          SECRET           TOP SECRET

    Encryption:
    Advanced Standard (AES)                            128 bits         256 bits

    Digital Signature:
    Elliptic Curve Digital Signature Algorithm (ECDSA) 256 bit curve.	384 bit curve

    Key Exchange:
    Elliptic Curve Diffie-Hellman (ECDH)               256 bit curve.	384 bit curve

    Hashing:
    Secure Hash Algorithm (SHA)	                       SHA-256           SHA-384

 

For Suite B compliance, the `ECDSA_P384#Microsoft Software Key Service Provider` as well as the `384` key size and `SHA384` as the hash algorithm may also be selected if the level of classification desired is Top Secret.  The settings that correspond with the required level of classification should be used. `ECDSA_P521` is also available as an option.  While the use of a 521 bit ECC curve may exceed the cryptographic requirements of Suite B, due to the non-standard key size, 521 is not part of the official Suite B specification.
 

Finally one should know that installing AD Certificate Services isn't as simple as adding the role.  The file [CAPolicy.inf][2] should be edited as needed for your environment 

  [1]: http://www.microsoft.com/en-us/download/details.aspx?id=14551
  [2]: http://technet.microsoft.com/en-us/library/cc756120.aspx