Installing an SSL certificate in Zimbra involves multiple steps. Here’s a guide to help you through these steps:
1. Purchase SSL Certificate: You need to buy an SSL certificate from a trusted certificate authority.
1. Generate CSR: Now, you need to generate a Certificate Signing Request (CSR) on your Zimbra server. Login to your server terminal and get root access with the command `sudo su -` . Move to Zimbra’s OpenSSL bin directory by `cd /opt/zimbra/openssl/bin/` . Generate CSR with `./openssl req -new -newkey rsa:2048 -nodes -out myserver.csr -keyout myserver_private.key -subj “/C=US/ST=Yourstate/L=Yourcity/O=YourCompany/OU=YourDepartment/CN=YourZimbraServerHostname”`.
1. Submit CSR: The CSR you’ve generated needs to be submitted to the SSL Certificate Provider.
1. Verify and Download Certificate: Once the SSL provider verifies your domain, you’ll get your SSL certificate in an email. Download the certificate file and store it in a secure location on your local machine.
1. Upload Certificates to Zimbra Server: SCP the certificate to your Zimbra server with the command `scp /path/to/certificate.crt root@your_zimbra_server_hostname:/opt/zimbra/ssl/zimbra/commercial/`.
1. Install Certificate: On your Zimbra server, switch to Zimbra user by `su – zimbra` and then move to the commercial SSL directory by `cd /opt/zimbra/ssl/zimbra/commercial/`. Verify the certificate by `wget https://ssl-provider-certs-path -O ssl-provider-bundle.crt`. And then finally validate the certificate by `/opt/zimbra/bin/zmcertmgr verifycrt comm private.key commercial.crt ssl-provider-bundle.crt`.
1. Deploy Certificate: After certificate gets validated successfully, deploy it by `/opt/zimbra/bin/zmcertmgr deploycrt comm commercial.crt ssl-provider-bundle.crt`.
1. Restart Zimbra Services: Now, you can switch back to the root user with `exit` and then restart Zimbra services by `zmcontrol restart`.
After these steps, your Zimbra server will be running with a new SSL certificate!
Note: Please adjust the names of the files and hostname of your server accordingly. Also, if you’re not familiar or comfortable with these steps, consider hiring a professional to do it for you, as incorrect implementation can lead to major issues.
