We used OpenSSL to generate keys and certificates. The link below guided me through the process: http://slacksite.com/apache/certificate.htmlI generated keys and certs on a unix box, then pasted them onto our IronPort boxes.

LDAPAccept works for us also with Query: (proxyaddresses=smtp:{a})Note that we are using Windows Exchange/AD 2003. I have no experience with 2000 as we recently converted from HP OpenMail. Good luck, mdial