Certificate Bindings on Exchange

Dear All,

I am having difficulty in deciding the correct certificate bindings in our Exchange 2010/IIS 7 environment. This confusion is almost certainly down to my lack of understanding.

We currently have an internal self-signed certificate in the name of our exchange server. And this is bound on two entries in our bindings for 443 traffic, one going to the IP address * and one that goes to 127.0.0.1 with the SSL certificate being the self-signed certificate.

I have purchased a certificate in the name of the OWA url and it is installed on the Exchange server. How do I set up the 443 traffic bindings so that internal outlook users don’t get the certificate prompt and the external WebApp can use my validated 3^rd party certificate?

Cheers.

Alastair