Here is [information regarding the Suite B algorithms supported in Windows 2008 and R2][1] ALGORITHM SECRET TOP SECRET Encryption: Advanced Standard (AES) 128 bits 256 bits Digital Signature: Elliptic Curve Digital Signature Algorithm (ECDSA) 256 bit curve. 384 bit curve Key Exchange: Elliptic Curve Diffie-Hellman (ECDH) 256 bit curve. 384 bit curve Hashing: Secure Hash Algorithm (SHA) SHA-256 SHA-384 For Suite B compliance, the `ECDSA_P384#Microsoft Software Key Service Provider` as well as the `384` key size and `SHA384` as the hash algorithm may also be selected if the level of classification desired is Top Secret. The settings that correspond with the required level of classification should be used. `ECDSA_P521` is also available as an option. While the use of a 521 bit ECC curve may exceed the cryptographic requirements of Suite B, due to the non-standard key size, 521 is not part of the official Suite B specification. Finally one should know that installing AD Certificate Services isn't as simple as adding the role. The file [CAPolicy.inf][2] should be edited as needed for your environment [1]: http://www.microsoft.com/en-us/download/details.aspx?id=14551 [2]: http://technet.microsoft.com/en-us/library/cc756120.aspx