Generating a Certificate Request

After a Client Access Server has been installed, the role has a self-signed certificate installed on it.

OWA (Outlook Web App in Exchange 2010) and Exchange ActiveSync (EAS) can use the self-signed certificate if the certificate is trusted by the client. The trust can be accomplished by installing the certificate into the computer or mobile device’s certificate store or by using a GPO to deliver it to domain-based computers. Outlook Anywhere does not work with Exchange Server 2010/2007’s self-signed certificate. It requires a valid certificate issued by a Certification Authority (CA)—either an enterprise root CA or a trusted third-party CA.