renew an invalid certificate in Exchange 2016

Hi Experts!

I have recently migrated an Exchange 2010 to 2016, I exported the certificate from 2010 then imported to 2016, but it is showing invalid, Outlook is giving certificate warning when it starts, but OWA is working fine.
As the certificate is expiring soon, we are going to renew it, one simple question, can I just ignore the "invalid" status and click on "Renew" as I normally do the renew process or do I have to fix the status first and do the renew process? what are the consequences if I continue to do the former? and what should I do if I need to solve the issue in latter?

Thanks!
LVL 11
manav08Asked:
Who is Participating?
 
timgreen7077Exchange EngineerCommented:
You need to make sure that the autodiscover SCP name is on your cert and then yes that will resolve that issue.
0
 
timgreen7077Exchange EngineerCommented:
You can renew and ignore the error if you choose but your end users will be annoyed.
0
 
manav08Author Commented:
so after the renewal, will the certificate show "valid" or there is more action needed?
the end users are already experiencing the warnings that why I'm trying to fix.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
Vidit BhardwajAdminCommented:
Invalid can be because you don't have proper certificate chain on you exchange server computer account , renewing should not be a problem just make sure you are keeping all the namespaces intact.
0
 
Hardik DesaiIT Architect and TrainerCommented:
Have you exported the certificate with private key or without private key? It should have been exported with private key in .pfx format. .cer format does not support export of private key and cannot be used to export and import certificates on another server.
0
 
Robinsan ShawFreelancer BloggerCommented:
Hi Mavan08!
To avoid Outlook alerts containing certificate warnings, you can reconfigure your namespaces and/or install a valid SSL certificate. And to know more about the procedure, visit; https://practical365.com/exchange-server/outlook-certificate-warning-exchange-2016/

Thank You.
0
 
manav08Author Commented:
We ended up getting a new certificate with the same domain names, followed instruction from ssl provider and all good now, Thanks!
1
 
Vidit BhardwajAdminCommented:
Thanks for sharing Manav!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.