# SHA-2 Support

OvenMediaEngine Enterprise는 강력한 보안이 요구되는 Enterprise 환경에 맞춰 `Alert`, `SignedPolicy`,  `AdmissionWebhooks` 인증에 사용되는 Hash Algorithm을 `SHA-2`로 선택할 수 있는 기능을 제공합니다.

요구되는 환경 및 성능에 따라 OvenMediaEngine Enterprise 내 Settings (Server.xml)에서 `SHA-256`, `SHA-384`, `SHA-512` 등 직접 선택이 가능하여 유연한 운영이 가능합니다.

## SHA-2 설정하기

`SHA-2`는 `<Alert>`, `<SignedPolicy>`, `<AdmissionWebhooks>`에 적용할 수 있으며, Server.xml에서 아래와 같이 설정하여 사용할 수 있습니다:

```xml
<?xml version="1.0" encoding="UTF-8"?>
<Server version="8">
  ...
  <Alert>
    <HashAlgorithm>SHA-256</HashAlgorithm>
    ...
  </Alert>
  ...
  <VirtualHosts>
    <VirtualHost>
      <SignedPolicy>
        <HashAlgorithm>SHA-256</HashAlgorithm>
        ...
      </SignedPolicy>
      ...
      <AdmissionWebhooks>
        <HashAlgorithm>SHA-256</HashAlgorithm>
        ...
      </AdmissionWebhooks>
      ...
    </VirtualHost>
  </VirtualHosts>
</Server>
```

### Hash Algorithm 값

OvenMediaEngine Enterprise에서 사용할 수 있는 `<HashAlgorithm>` 값은 총 7가지입니다:

#### SHA-1

<table><thead><tr><th width="151">Value</th><th>Expression</th></tr></thead><tbody><tr><td><p>SHA-1</p><p><mark style="color:yellow;">* Default</mark></p></td><td><code>&#x3C;HashAlgorithm></code><strong><code>SHA-1</code></strong><code>&#x3C;/HashAlgorithm></code></td></tr></tbody></table>

#### SHA-2

<table><thead><tr><th width="151">Value</th><th>Expression</th></tr></thead><tbody><tr><td>SHA-224</td><td><code>&#x3C;HashAlgorithm></code><strong><code>SHA-224</code></strong><code>&#x3C;/HashAlgorithm></code></td></tr><tr><td>SHA-256</td><td><code>&#x3C;HashAlgorithm></code><strong><code>SHA-256</code></strong><code>&#x3C;/HashAlgorithm></code></td></tr><tr><td>SHA-384</td><td><code>&#x3C;HashAlgorithm></code><strong><code>SHA-384</code></strong><code>&#x3C;/HashAlgorithm></code></td></tr><tr><td>SHA-512</td><td><code>&#x3C;HashAlgorithm></code><strong><code>SHA-512</code></strong><code>&#x3C;/HashAlgorithm></code></td></tr><tr><td>SHA-512/224</td><td><code>&#x3C;HashAlgorithm></code><strong><code>SHA-512/224</code></strong><code>&#x3C;/HashAlgorithm></code></td></tr><tr><td>SHA-512/256</td><td><code>&#x3C;HashAlgorithm></code><strong><code>SHA-512/256</code></strong><code>&#x3C;/HashAlgorithm></code></td></tr></tbody></table>