Deploy Certificate or renew certificate on Zimbra server

Posted On June 2, 2017

In this example we used Zimbra Admin interface to create csr. This is done by going to Configure – Certificates then right click on the server name and then select install certificates. In the menu choose create csr. Ones comepleted submit to certificate authority of your choice – We used Go Daddy.
Ones verified we received zip file with 2 certificates. Server certificate 843535.crt and intermid. certificate bundlexx.crt



Follow steps below to complete

mkdir /root/certs   # place the cert files in there

rename gd_bundlxx.crt (given by GoDaddy when downloading certificate) to commercial_ca.crt.

mv gd_bundlxx.crt commercial_ca.crt

verify the certificate

cd /root/certs
/opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key ./843535.crt ./commercial_ca.crt

deploy the cert

cd /root/certs
/opt/zimbra/bin/zmcertmgr deploycrt comm ./843535.crt ./commercial_ca.crt

restart the zimbra services

  su - zimbra
  zmcontrol stop
  zmcontrol start