EV buttons missing and attachments showing up as @65 in OWA 2010

Hi Guys,

Using EV 10.0.4 R1 CHF2 with Exchange 2010, separate CAS and mbx server.

Installed OWA 2010 extensions on CAS, I see the EnterpriseVault_ResourceVersion entry in IIS\OWA\App settings. 

Set up ExchangeServers.txt on EV and ran the owauser.wsf script.  I see the CAS server IP's as allowed in IIS\EVAnon\IP Address and Domain Restrictions.

When we open OWA internally we don't see the EV Search button, also we don't see the attachments - only @65 shows up as attachment and the attachment name in the content as text.

So it seems EWS is not aware of EV.

Client is using third party SSL certificates.

On the CAS server, trying to open http://localhost/ews/exchange.asmx generates 403 Forbidden error (see attached).  So there is a permission issue it seems but I can't figure out what!

Any ideas?

Thanks,

Fremont