Things that make you go hmmm....
Ran across a scenario where we were trying to connect Azure Cross-platform (Linux) VM's and MMA/SCOM agents to SCOM management group.
Management group was 2012R2, discovery wizard from SCOM console, failed to install agent, certificate errors.
Reseraching, found this article first
Windows Azure VM monitoring
SCOM2012R2 after UR12 or SCOM 2016 UR2+ deprecated the SHA1 certificate
Deprecating SHA1 certificates
Product team nicely published a TechNet gallery script to help!
Gallery download - Script to update SHA1 certificates to SHA256 on cross-platform agents - SCOM