Hello, I just installed an Exchange 2010 server, installed SP1 and then installed our SSL cert for Outlook web. That same cert is being used by the internal client and throws an error as the domain and host name are not the same. internal is company.local and external it is comany.com How do I configure Exchange to not use the company.com Cert for our Outlook clients? I've tried changing settings in Server config -> Exchange Certs and selecting only IIS for the company.com cert and all else for the company.local cert. Any thoughts? Thanks

You can't have multiple certificates. You need to purchase a different kind of certificate - known as a Unified Messaging or Subject Alternative Name certificate. This will include the additional names that Exchange needs to operate: host.example.com (common name) autodiscover.example.com server (server NETBIOS name) server.example.local (server FQDN). While it is possible to use a regular single name SSL certificate, if you are using Outlook Anywhere then your external DNS provider MUST support SRV records and you will need to setup a split DNS system so that the external name resolves internally to the Exchange server. What you have done about changing the SSL certificate with the roles will not work because Outlook 2007 and higher makes IIS calls to Exchange for internal autodiscover, OAB and availability, and that means the same certificate is being used as for external traffic. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources | In the UK? Hire Me.

Thank you for the reply, would the SSL Cert be called a Multipule Domain Cert(UCC)? I'm trying to find the right Cert on Godaddys site. __ Nevermind, that is the correct cert, I have it installed and am good to go. Thanks again.

UCC - Unified Communications Certificate. Simon.Simon Butler, Exchange MVP Blog | Exchange Resources | In the UK? Hire Me.