This is a new setup for exchange 2010 server. I heard that there is a self-signed certificate being setup during exch setup. But quite worry that this cert can't support Internet-accessing clients for OWA and Outlook Anywhere. BTW, for both applns, clients accessing them using different URLs. For internal access, user accessing through "exch01.companya.local", and "mail.companya.com" while accessing from Internet. Since self-signed certificate may not supporting, can I use MS CA to do it, and then, what common name should I put? Please show step-by-step, thanks.