AD CS 2012 - existing two tier with offline Root CA - how to change CSP

Hi,

Upon configuring Cisco ASA for certificate authentication, I find out it does not support certificates using the RSA#Microsoft Software Key Storage Provider from Windows 2012 CS; therefore I can not import Root and subordinate certs onto the ASA.

I do know that it does support Microsoft Enhanced Cryptographic Provider.. Is there a way to change the CSP values and or rekey the Root and Subordinate to a different CSP so that it can be used on the ASA?