EAServer security certificate question

I have a client with EAServer 6.3.1.07 Advanced Edition. They need to install a new security certificate which will change it from SHA-1 to SHA-256.

SAP tells them they need to install new SAPCRYPTOLIB.

My question is whether there is a certain patch level of 6.3.1.07 or perhaps a newer version that is required before they can install the latest SAPCRYPTOLIB and then the new SHA-256 certificate?

I'm not familiar with EAServer 6.x so if there is any info you have about this subject please reply.

Thanks,

Roland