Installing a certificate for Zimbra

This instruction must be executed by the zimbra user or a user created for zimbra.

Placement

Place your:

• Private key (.key)
• Root SSL certificate (Download from here https://gogetssl-cdn.s3.eu-central-1.amazonaws.com/wiki/gogetssl-rsa-dv-bundle-sha1.txt)
• Signed certificate

In the folder /opt/ssl_domain.com/

Verification

Enter the following command in the command line and change domain.com to your domain:

/opt/zimbra/bin/zmcertmgr verifycrt comm /opt/ssl_domain.com/domain.com.key /opt/ssl_domain.com/domain.com.crt /opt/ssl_domain.com/domain.com.ca

Export

Then enter the following command, changing domain.com to your domain:

/opt/zimbra/bin/zmcertmgr deploycrt comm /opt/ssl_domain.com/domain.com.crt /opt/ssl_domain.com/domain.com.ca

Check

Check that your certificate has been placed on the desired services with the following command:

/opt/zimbra/bin/zmcertmgr viewdeployedcrt

Application

After you have successfully placed the certificate and verified that the correct certificate has been placed on the server, restart the services with the following command:

zmcontrol restart