https://discussions.soti.net/kb/android-10-sha-1-deprecation

Android 10 deprecates support for SHA1 certificates. Most new Android devices today are going to be running a version of Android 10 or newer, or may soon be upgraded to Android 10. I used to recommend 13.4 at a minimum for Android but you realistically should be on a 15.x version at this point. Note however, if you are currently using 13.x to manage older Windows CE devices, those likely will have the opposite problem of not supporting newer versions of SHA2 or SHA3 certs. 

Thank you Matt for your answer

Yes I am aware if I upgrade till version 15 I will have the oposite issue with my windows CE devices

If I am still having a lot of Windows CE devices but want to start enrolling Android, can I upgrade my version to 13.4X and manage both OS? Windows CE and Android 8 perhaps ?

Thanks again 

Hi Aldo,

After upgrading to latest patch of v13.4, you should be able to enrol and control both Windows CE and Android 8/9 devices.  If you can enrol your such Android devices using any generic Android-Enterprise device agent, you can use most of the basic functionalities (e.g. Managed Google Play store, app configuration of managed apps with AppConfig framework, etc) of Android-Enterprise platform. 

There are many improvements for MobiControl v14.5.x, which is the version I currently recommend to my own biggest customers.  The recently released v15.3 has even more new and attractive AE features (new AE mode, new actions on devices, etc.), but I myself will be performing extensive tests on it before recommending to any of my customers.  For both cases, you might need to consider having a dual deployment server implementation, one with SHA1 certificate for Windows CE devices, and the other with SHA1 certificate for other device platforms.

Fair point about the stability of 15.x. 14.5 is great advice for that situation.