SMG 9.5: TLS implementation

Hi All,

For TLS implementation, let say only for 1 domain.

1) We have to give them our cert then they will pass their cert also right?

2) Also if we have IronPort as MX holder infront of SBG, do we need to installe cert into SBG too?

Thanks!