Installing Certs on your CAS server

If you can, install the certs before you install the CAS role. This way exchange can just pick up and use the pre-installed cert/certs instead of creating self-signed certs which you'll have to go change later to keep owa/activesync/outlook from kicking errors.