FREE TRIAL

Deploy a Free VPS Server Worldwide. No Credit Card Required.

Start Free Trial
  • +357 2425 0808
  • Login
  • English

Home

Blog

How To Install SSL Certificate on Zimbra...

How To Install SSL Certificate on Zimbra Collaboration Server via command line (CLI)

How To Install SSL Certificate on Zimbra Collaboration Server via command line (CLI)

NetShop ISP

NetShop ISP · Blog Author

Aug 30, 2022 · Tutorials

We are publishing this Zimbra tutorial as a lot of customers have reported an issue when trying to install their SSL Certificate using Zimbra’s Admin Console (GUI).

The steps listed below have been proof-tested on Zimbra Collaboration Open Source and Network editions (ZCS 8.7). If you are using an older or newer version of Zimbra and you are a NetShop ISP customer please contact our Support team for assistance.

Installing SSL Certificate using the CLI

Pre-requisites

  1. Zimbra Collaboration Suite (Open Source or Network) installed on a Linux server
  2. SSH access on the server
  3. Active (non-expired) SSL Certificate from your vendor (Don’t have one? Order EssentialSSL at €16.85/year)
  4. You have the following SSL Certificate files: Bundle (Root, Intermediate) and Certificate
  5. SSL key exists on your Zimbra server (/opt/zimbra/ssl/zimbra/commercial/commercial.key)

Step 1 – Upload Certificate on Server

As zimbra user, create a temporary file under (/tmp) and paste the Root and Intermediate certificates content (may be a single file named Bundle):

[root@zimbra-netshop /]$ su - zimbra
[zimbra@zimbra-netshop ~]$ vi /tmp/commercial_ca.crt

Save the file and exit.

Then, place the SSL Certificate in /tmp/commercial.crt

[zimbra@zimbra-netshop ~]$ vi /tmp/commercial.crt

Save the file and exit.

Step 2 – Verify SSL Certificate and Key

Do a dry-run to check if your Certificate chain (Certificate, Intermediate CA, Root) and your private key are OK. If you receive an error after executing the following command, contact your Zimbra server administrator.

[zimbra@zimbra-netshop ~]$ /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key /tmp/commercial.crt /tmp/commercial_ca.crt  

Ideal output should be:

** Verifying /tmp/commercial.crt against /opt/zimbra/ssl/zimbra/commercial/commercial.key Certificate (/tmp/commercial.crt) and private key (/opt/zimbra/ssl/zimbra/commercial/commercial.key) match.
Valid Certificate: /tmp/commercial.crt: OK

Step 3 – Deploy Certificate with zmcertmgr command

Deploy your SSL certificate with zmcertmgr command:

[zimbra@zimbra-netshop ~]$ /opt/zimbra/bin/zmcertmgr deploycrt comm /tmp/commercial.crt /tmp/commercial_ca.crt

Ideal output should be:

[ … ]
** Installing proxy certificate and key…done.
** Creating pkcs12 file /opt/zimbra/ssl/zimbra/jetty.pkcs12…done.
** Creating keystore file /opt/zimbra/mailboxd/etc/keystore…done.
** Installing CA to /opt/zimbra/conf/ca…done.

Step 4 – Restart Zimbra Services

Execute the following command as zimbra user:

[root@zimbra-netshop /]$ su zimbra
[zimbra@zimbra-netshop ~]$ zmcontrol restart

You are all set! You can navigate to your Zimbra server’s hostname and confirm you can access the Web interface via https.

Categories

Backup
6
Business Continuity
4
Cloud Hosting
10
Colocation
4
Company Updates
1
Cryptocurrencies
1
Data Centers
12
Dedicated Servers
4
Disaster Recovery
3
Forex
25
Gaming
1
iGaming
33
Industry News
32
Interviews
10
Joomla
9
Magento
5
Managed Services
1
Operating Systems
1
Press Releases
65
Product News
6
Resellers
1
Security
25
Software & Apps
1
Streaming
1
Tech Startups
12
Tutorials
62
Uncategorized
389
Vps Hosting
11
Web Design & Development
3
Web Hosting
44
Webinars
1
Wordpress
14

Free VPS Trial

No Credit Card Required.

Recent Posts

How To Install SSL Certificate on cPanel

How To Install SSL Certificate on cPanel

30 March, 2023

How To Enable Remote Connections to SQL Server

How To Enable Remote Connections to SQL Server

27 March, 2023

How To Fix Error Failed to download metadata for repo in CentOS 8

How To Fix Error Failed to download metadata for repo in CentOS 8

23 March, 2023

How can Forex Brokers be Protected from DDoS Attacks

How can Forex Brokers be Protected from DDoS Attacks

20 March, 2023

NetShop ISP Bronze Sponsors for the University of Cyprus at Harvard WorldMUN 2023

NetShop ISP Bronze Sponsors for the University of Cyprus at Harvard WorldMUN 2023

15 March, 2023

#letushostyou

Award Winning Hosting Provider established in 2004.

Best iGaming Service ProviderISO Certified

120 Faneromenis Avenue, Imperial Tower, 2nd Floor, Larnaca 6031, Cyprus

Products

Bare Metal Servers

Customized Servers

Virtual / Cloud Servers

Forex VPS

Storage VPS

cPanel Web Hosting

Reseller Web Hosting

Colocation

Addons

Premium DNS

Email Hosting

Cloud Backup

DDoS Protection

Licenses

SSL Certificates

Domain Names

Premium SLAs

About Us

Data Center Locations

Looking Glass

Our Company

Contact Us

Careers in Cyprus

Become a Partner

Awards

Certifications

© 2023 S.S. NetShop Internet Services Ltd. All rights reserved.  Terms & Conditions  |  Privacy Policy
CY Reg. Number: HE 217340 | EU VAT Number: CY10217340J

Visa
Mastercard
PayPal
Bitcoin
Tether
Ethereum
Litecoin
Wise
Revolut
Wire Transfer