You need to be assigned permissions before you can perform this procedure. To see what permissions you need, see the "SSL for Outlook Anywhere" and "IIS Manager" entries in the Client Access Permissions topic.

1. Configure a valid SSL certificate. You must obtain a valid SSL certificate from a certification authority (CA) that's trusted by the client computer's operating system. For more information, see Obtain a Server Certificate from a Certification Authority. After you obtain a valid SSL certificate, apply the certificate to the default Web site of your Client Access server. For more information, see Install an SSL Certificate on a Client Access Server.
   
   
2. Configure the URLs for Exchange services. You must configure the external and internal URLs for your available Exchange services to point to the default Web site, for example, mail.contoso.com. For more information about how to set the URLs for the Exchange services, see Configure Exchange Services for the Autodiscover Service.
   
   
3. Configure the service connection point object to use a site dedicated to handling e-mail, for example, mail.contoso.com. You can do this by running the following command:
   
   

   	Copy Code
   Set-ClientAccessServer -id <CAS01> -AutoDiscoverServiceInternalUri https://mail.contoso.com/autodiscover/autodiscover.xml

4. Configure the IP address for the default Web site. You must set the default Web site to listen on only one IP address. After you have done this, bind any additional IP addresses to the network adapter, also known as a NIC, for the Client Access server. For more information about how to do this, see your Windows server documentation.
   
   
5. Create a new Web site in Internet Information Services (IIS) Manager for the Autodiscover service redirection by doing the following:
   
   
   1. In IIS Manager, expand your Client Access server name to select and right-click Sites, then select Add Web Site. Enter your domain name under Site name.
      
      
   2. Under Physical path, navigate to %SystemDrive%\inetpub\. Under inetpub, create a new folder called Autodiscover_redirect.
      
      

   Note:
   You must allow the Users group Read & execute access to the Web site that you create.

6. Create the Autodiscover redirect. Use Windows Explorer to locate the folder that you created named Autodiscover_redirect. Create a new folder named Autodiscover in the Autodiscover redirect folder, and then use a text editor, such as Notepad, to create a new blank text file named Autodiscover.xml in the Autodiscover folder.
   
   
7. Configure the new Web site to redirect to the site that's dedicated to handling e-mail, for example, mail.contoso.com. In IIS Manager, right-click the Autodiscover.xml file that you created, and then click Properties. On the Properties page, select A redirection to a URL, and then enter the same URL that you used to configure the server connection point object. For example, https://mail.contoso.com/autodiscover/autodiscover.xml.
   
   
8. Test your results to make sure that the site that you're using to handle e-mail, for example, mail.contoso.com, can be resolved internally and externally by using your Outlook 2010 or Outlook 2007 client.
   
   

After you configure Outlook Anywhere to use an SSL certificate with redirection, you may also want to:

• Configure SSL Offloading for Outlook Anywhere