SHA2 encryption and TLS1.2 support were new features in 14.0 SP1. Windows XP SP3 does support SHA2. In addition, Microsoft continues to support Window Embedded POSReady2009 through 2019. My understanding is WEPOSReady 2009 is simply select embedded components of the full Windows XP OS. Given there is a Microsoft supported "XP OS," this idea is for CA to create a 14.1 agent, with SHA2 features, to run on Windows XP SP3.