renew an invalid certificate in Exchange 2016

Hi Experts!

I have recently migrated an Exchange 2010 to 2016, I exported the certificate from 2010 then imported to 2016, but it is showing invalid, Outlook is giving certificate warning when it starts, but OWA is working fine.
As the certificate is expiring soon, we are going to renew it, one simple question, can I just ignore the "invalid" status and click on "Renew" as I normally do the renew process or do I have to fix the status first and do the renew process? what are the consequences if I continue to do the former? and what should I do if I need to solve the issue in latter?

LVL 11
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

timgreen7077Exchange EngineerCommented:
You can renew and ignore the error if you choose but your end users will be annoyed.
manav08Author Commented:
so after the renewal, will the certificate show "valid" or there is more action needed?
the end users are already experiencing the warnings that why I'm trying to fix.
timgreen7077Exchange EngineerCommented:
You need to make sure that the autodiscover SCP name is on your cert and then yes that will resolve that issue.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Vidit BhardwajAdminCommented:
Invalid can be because you don't have proper certificate chain on you exchange server computer account , renewing should not be a problem just make sure you are keeping all the namespaces intact.
Hardik DesaiIT Architect and TrainerCommented:
Have you exported the certificate with private key or without private key? It should have been exported with private key in .pfx format. .cer format does not support export of private key and cannot be used to export and import certificates on another server.
Robinsan ShawFreelancer BloggerCommented:
Hi Mavan08!
To avoid Outlook alerts containing certificate warnings, you can reconfigure your namespaces and/or install a valid SSL certificate. And to know more about the procedure, visit;

Thank You.
manav08Author Commented:
We ended up getting a new certificate with the same domain names, followed instruction from ssl provider and all good now, Thanks!
Vidit BhardwajAdminCommented:
Thanks for sharing Manav!
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.