Brad,
You well answered my question. Very informative. Thanks!
Now, I have "restored" the self-assigned certificate to the CAS server that resides in a non-internet facing site. But the Outlook 2007 clients in that site starts to see security alert again, but a different one. "X The security certificate was issued by a
company you have not chosen to trust..." This only happens after clicking the Scheduling Assistant to look up free/busy information of another user. And it only happens for the first time checking free/busy after Outlook 2007 is launched. Subsequent checking
free/busy will not trigger such security alert. To reproduce the alert, I have to re-launch the Outlook client. I have tested this on two different computers. Both got the same issue. The interesting thing is answering Yes or No at the security alert does
not seem to affect setting up and sending out the meeting request at all. Also, the Outlook clients have no problem doing send/receive, downloading OAB. None of these tasks would trigger that security alert. New Outlook clients in that site can also be automatically
configured.
I also checked all the internal URLs, including the EWS, to ensure they are using the host name of that CAS server, such as
https://cas01.contoso.com/ews/exchange.asmx
https://cas01.contoso.com/ews/exchange.asmx
I wonder if I have missed something after I put the self-assigned certificate back. Or, is it expected for the Outlook 2007 client to see that security alert in that "unique situation", when using self-assigned certificate?
Thanks,
Adam