diff --git a/roles/fas_server/templates/fas.cfg.j2 b/roles/fas_server/templates/fas.cfg.j2
index a2649ad3b3..513c6a6b59 100644
--- a/roles/fas_server/templates/fas.cfg.j2
+++ b/roles/fas_server/templates/fas.cfg.j2
@@ -235,7 +235,7 @@ gencert = "{{ gen_cert }}"
 
 makeexec = "/usr/bin/make"
 openssl_lockdir = "/var/lock/fedora-ca"
-openssl_digest = "md5"
+openssl_digest = "sha256"
 openssl_expire = 15552000 # 60*60*24*180 = 6 months
 openssl_ca_dir = "/var/lib/fedora-ca"
 openssl_ca_newcerts = "/var/lib/fedora-ca/newcerts"