
Explanation/Reference:
Explanation:
Root certificate
If you're using a self-signed certificate or a certificate authority (CA)-issued certificate that is not preinstalled in the Trusted Root Certification Authorities store of your devices, you'll have to manually install it before your device can work with a Secure Sockets Layer (SSL)-enabled server.
Trusted Root Certification Authorities
Because the certificate is self signed, Internet explorer will automatically install it in the Trusted root Certificate Authority list.
If you use a certification authority (CA) to issue smart card login or domain controller certificates, you must add the root certificate to the Trusted Root Certification Authorities group policy in Active Directory If you're using a self-signed certificate or a certificate authority (CA)-issued certificate that is not preinstalled in the Trusted Root Certification Authorities store of your devices, you'll have to manually install it before your device can work with a Secure Sockets Layer (SSL)-enabled server.
http://resources.arcgis.com/en/help/windows-mobile/app/index.html#//007v00000029000000 Install a certificate on a Windows or a Windows Mobile device Install a certificate on a Windows device
Steps:
Browse to the location where you have exported the certificate to, then double-click the certificate file.

The Certificate window appears, click Install Certificate.

The Certificate Import Wizard window appears, click Next, on the next page choose the Place all

certificate in the following store option, and click Browse.
The Select Certificate Store window appears, select Trusted Root Certificate Authorities, and click OK.

Click Next and Finish in the next two screens to close the wizard and complete the process.

Click Yes on the security warning to install the certificate.

Click OK to dismiss the Certificate window.

Testlet 1
Overview
Litware, Inc., is a manufacturing company located in North America.
The company has a main office and two branch offices. The main office is located in Chicago. The branch offices are located in Baltimore and Los Angeles.
Existing Environment
Active Directory Environment
The network contains one Active Directory forest named litwareinc.com. Each office is configured as an Active Directory site.
All domain controllers in the Los Angeles office run Windows Server 2008 R2. All domain controllers in the Chicago office run Windows Server 2003 Service Pack 1 (SP1). All domain controllers in the Baltimore office run Windows Server 2012.
All of the FSMO roles are located on a domain controller in the Baltimore office. All of the domain controllers are configured as global catalog servers.
You have a distribution group for each department. The distribution groups contain all of the users in each respective department.
Network Infrastructure
The servers in each office are configured as shown in the following table.

The Baltimore and Chicago offices have independent Internet connections. Internet connectivity for the Los Angeles office is provided through Chicago.
Users frequently send large email messages to other users in the company. Recently, you increased the maximum message size to 50 MB.
Planned Changes
The company plans to deploy a new Exchange Server 2013 infrastructure that will contain two Clients Access servers and two Mailbox servers in the Chicago office. The servers will be configured as shown in the following table.

All client connections to the Exchange Server organization will be routed through a hardware load balancer. The name client.litwareinc.com will point to the virtual IP address of the hardware load balancer.
Once the transition to Exchange Server 2013 in the Chicago office is complete, all mail flow to and from the Internet will be managed centrally through that office by using a Send connector that has the following configurations:
Connector name: CH-to-Internet

Address space: *

Source servers: CH-EX2, CH-EX3

Cost: 10
