Note that you must perform the following tasks after upgrading to 2048 bit key and SHA256 signature certificates:
Delete certificates of non-root users after upgrading to 2048 bit key and SHA256 signature certificates.
Re-establish WAC communication in global clusters after upgrading to 2048 bit key and SHA256 signature certificates.
Re-establish communication between Steward and upgraded clusters.
See Re-establishing trust with Steward after upgrading to 2048 bit key and SHA256 signature certificates.