I have same work to do as this admin,http://www.eggheadcafe.com/software/aspnet/29841472/securing-an-owa-nlb-clust.aspxanswer from a MVP was ;1 certificate - create cert request - use the external/common URL for theNLB cluster, generate CSR and install cert on the first server. Export certwith privte key and install it on the second one.Bharat SunejaMVP - ExchangeCan someone outline me how to do thelast part (install it on the second one) ?How is best to import pfx file to second server ? via IIS or cert mmc ? How to assign the cert to second server ? After certificate instatllation, how can I test OWA on each server separately ? Thanks and Regards,mt

Dear customer: You can perform the following steps to do that: 1. Use the Get-ExchangeCertificate cmdlet to obtain the correct Thumbprint for your certificate you want to transfer. The thumbprint is used in the next step for exporting the certificate. 2. Use the Export-ExchangeCertificate cmdlet to export the certificate to a .pfx file from the Exchange Server 2007 server currently holding the certificate. Ensure you export the private key also. (Use Get-credential to create a password when exporting the Privatekey). Example: Export-ExchangeCertificate Thumbprint <Thumbprint ID> -Path c:\mycert.pfx Password -(Get-Credential).Password 3. Copy .pfx file to the new Exchange Server 2007 server. 4. Use the Import-ExchangeCertificate cmdlet to import the .pfx file certificate to the new Exchange Server 2007 server. Note: If you are using these steps to generate and enable a certificate from your own Certificate Authority, do not forget to also distribute the root certificate from your certificate authority to all of your clients that at times might not be logged into the domain so all certificate tests pass. 5. Use the Enable-ExchangeCertificate and Thumbprint ID from Step 4 to enable the transferred certificate on the new Exchange Server 2007 server. If anything is unclear, feel free to let me know. Rock Wang - MSFT