Deploy Certificate or renew certificate on Zimbra server
Posted On June 2, 2017
In this example we used Zimbra Admin interface to create csr. This is done by going to Configure – Certificates then right click on the server name and then select install certificates. In the menu choose create csr. Ones comepleted submit to certificate authority of your choice – We used Go Daddy.
Ones verified we received zip file with 2 certificates. Server certificate 843535.crt and intermid. certificate bundlexx.crt
Follow steps below to complete
mkdir /root/certs # place the cert files in there
rename gd_bundlxx.crt (given by GoDaddy when downloading certificate) to commercial_ca.crt.
mv gd_bundlxx.crt commercial_ca.crt
verify the certificate
cd /root/certs /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key ./843535.crt ./commercial_ca.crt
deploy the cert
cd /root/certs /opt/zimbra/bin/zmcertmgr deploycrt comm ./843535.crt ./commercial_ca.crt
restart the zimbra services
su - zimbra zmcontrol stop zmcontrol start