In Exchange 2013, you can use the Certificate Wizard to request a digital certificate from a certification authority. After you’ve requested a digital certificate, you’ll need to install it on the Client Access server.

You don’t need to install digital certificates on the Mailbox servers in your organization. A self-signed certificate is installed by default on the Mailbox servers, and it doesn’t need to be replaced. The Client Access servers in your organization implicitly trust the self-signed certificate on the Mailbox servers. For more information, see Exchange 2013 Certificate Management UI.

There are several settings that you can configure on the virtual directories for the Offline Address Book (OAB), Exchange Web Services, Exchange ActiveSync, Outlook Web App, and the Exchange Administration Center. For additional information about virtual directory management, see Virtual Directory Management. You can configure the virtual directories using the following commands.

• To configure Outlook Anywhere, run the following command.
  
  

  	Copy Code
  Enable-OutlookAnywhere -Server:<CAS15> -ExternalHostName:mail.contoso.com -SSLOffloading $false

• To configure Exchange ActiveSync, run the following command.
  
  

  	Copy Code
  Set-ActiveSyncVirtualDirectory -Identity <CAS15>\Microsoft-Server-ActiveSync -ExternalUrl "https://mail.contoso.com/Microsoft-Server-ActiveSync"

• To configure the Exchange Web Services virtual directory, run the following command.
  
  

  	Copy Code
  Set-WebServicesVirtualDirectory -Identity <CAS15>\Microsoft-Server-ActiveSync -ExternalUrl "https://mail.contoso.com/EWS/Exchange.asmx"

• To configure the Offline Address Book, run the following command.
  
  

  	Copy Code
  Set-OabVirtualDirectory -Identity <CAS15>\Microsoft-Server-ActiveSync -ExternalUrl "https://mail.contoso.com/OAB"

Use this section to help you configure external access to protocols on the Exchange 2013 Client Access server. Run the Exchange Management Shell commands in the configuring virtual directories section above, as well as the commands below.

You'll have to run the following commands to configure the virtual directories for Exchange 2013.

1. To configure an external URL for Outlook Web App, run the following command in Exchange Management Shell.
   
   

   	Copy Code
   Set-OwaVirtualDirectory <CAS2013>\OWA* -ExternalUrl https://mail.contoso.com/OWA

   Run the following commands at a command prompt after you set the Outlook Web App virtual directory.
   
   

   	Copy Code
   Net stop IISAdmin /y

   	Copy Code
   Net start W3SVC

2. To configure external EAC access, run the following command in Exchange Management Shell.
   
   

   	Copy Code
   Set-EcpVirtualDirectory <CAS2013>\ECP* -ExternalUrl https://mail.contoso.com/ECP -InternalURL https://mail.contoso.com/ECP

3. To configure the Availability service, run the following command in Exchange Management Shell.
   
   

   	Copy Code
   Set-Webservicesvirutaldirectory -Identity <CAS2013>/EWS\(Default Website) -ExternalURL https://mail.contoso.com/EWS/Exchange.asmx

To verify that the external URL has been configured correctly for Exchange ActiveSync or Outlook Web App, you can use the Exchange Remote Connectivity Analyzer (ExRCA), a free Web-based tool provided by Microsoft. You can find ExRCA at: https://www.testexchangeconnectivity.com

To verify that authentication has been configured correctly for Exchange ActiveSync or Outlook Web App, you can also use ExRCA.

To verify that direct file access has been configured correctly for Outlook Web App, log on as a user to Outlook Web App using the public computer option and then try to access and save a file attached to an email message.

You'll have to run the following commands to configure the virtual directories for Exchange 2007.

• To configure the external URL on the Exchange ActiveSync virtual directory, run the following command in Exchange Management Shell.
  
  

  	Copy Code
  Set-ActiveSyncVirtualDirectory -Identity <CAS2013>\Microsoft-Server-ActiveSync -ExternalUrl https://mail.contoso.com/Microsoft-Server-ActiveSync