By default, Symantec Encryption Management Server 3.3.x uses SHA-1 when creating it's SSL Certificate Signing Requests (CSR) in order to secure communications to the server over secure ports. Requests have been submitted to use SHA-2 instead.
Symantec Encryption Management Server 3.4.0 and above uses SHA-256 by default.
For more information on this, please see article TECH224744.