This company has a netsolsll.com cert which consists of 3 files, GlobalRoot.crt, CA.crt, www.domain.com.crt. In order for them to re-issue the cert under owa.domain.com I have to create a CSR by doing the following: Create Server Cert on default web site under IIS - Prepare the request now, but send it later - Enter in the info - Save it as c:\certreq.txt Then export the request from Certificates (via MMC). I know were the CA.crt goes but do am I to do with the other .crt files? And are they to go into the same place in ISA 2004 server as well?? Thanks Andrew