I have internal domain (company.local) DNS hosted locally and external domain (company.com) hosted by AT&T DNS where I have my OWA and Autodiscover dns records. I havepurchased SAN SSL certificate with all the external client access records. My question is, since my IIS virtual directory is in the local dns, how do I configure https://mail.company.com and https://autodiscover.company.com in IIS to apply the certificate to this internet facing domain? Thanks Augustine

use the import-exchangecertificate and enable-exchangecertificate powershell cmdlets: http://technet.microsoft.com/en-us/library/aa997231.aspx

Thanks. One more question, please. Do I need to configure a host header in IIS for the https://mail.company.com, https://autodiscover.company.com? Augustine

I don't see any reason you'd need to...I've got a similar setup and have not had a need for host headers.

Thanks. I will enable the certificate then.

I applied the certificate (SAN) and the OWA is working okay but not the Autodiscover. It hangswhen configuring Outlook - "Search for user@company.com server settings."I have an "A" record as autodiscover.company.com in my external dns and pointing to the same I.P address as my OWA. I am also using NTLM with SSL (offloading) as my authentication. One thing I did was simplifying the URL of the OWA to http://mail.company.com. Any thoughts? Thanks