How to Install SSL Certificate on Zimbra version 5, 6, 7 & 8 Server

SSL Reviews
Posted by SSL Reviews

Installation instructions for the Zimbra server are included in this text. Symantec advises that you contact the Zimbra provider if you are unable to execute the measures on the server.

Step 1: Obtain your SSL Certificate

To import the Certificate from your account, click here.

Using one of the following methods to mount the SSL Certificate on the Zimbra server:

Method 1: Use Command Line Interface ( CLI) to mount the SSL certificate

Step 1. Download the CA Root

  • Download the certificate for Root and Intermediate from here. Save the certificate file for Root CA (e.g. /tmp / ca.crt)
  • Transfer the certificates for Intermediate and Root to the same directory. (for instance, /tmp / ca intermediate.crt)
  • Using the cat command to merge Root and Intermediate CA files into a temporary file

cat /tmp/ca.crt /tmp/Intermediate_CA.crt > /tmp/ca_chain.crt

Step 2. Install the SSL Certificate

  1. Verify the ssl certificate with the zmcertmgr order that follows.

/opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key /tmp/commercial.crt /tmp/ca_chain.crt
**Verifying /tmp/commercial.crt against /opt/zimbra/ssl/zimbra/commercial/commercial.key
Certificate (/tmp/commercial.crt) and private key
(/opt/zimbra/ssl/zimbra/commercial/commercial.key) match.
Valid Certificate: /tmp/commercial.crt: OK

NOTE: On the Zimbra registry, a private key (e.g. /opt / zimbra / ssl / zimbra / commercial / commerical.key) is generated.If the private key no longer resides on the registry, a new CSR has to be created and a replacement certificate has to be requested.

  • To deploy the ssl credential, run the zmcertmgr command that follows.
/opt/zimbra/bin/zmcertmgr deploycrt comm /tmp/commercial.crt /tmp/ca_chain.crt ** Verifying /tmp/commercial.crt against
/opt/zimbra/ssl/zimbra/commercial/commercial.key
Certificate (/tmp/commercial.crt) and private key
(/opt/zimbra/ssl/zimbra/commercial/commercial.key) match.
Valid Certificate: /tmpt/commercial.crt: OK
**Copying commercial.crt to /opt/zimbra/ssl/zimbra/commercial/commercial.crt
**Appending ca chain /tmp/ca_chain.crt to
/opt/zimbra/ssl/zimbra/commercial/commercial.crt
**Saving server config key zimbraSSLCeretificate…done.
**Saving server config key zimbraSSLPrivateKey…done.
**Installing mta certificate and key…done.
**Installing slapd certificate and key…done.
**Installing proxy certificate and key…done.
**Creating pkcs12 file /opt/zimbra/ssl/zimbra/jetty.pkcs12…done.
**Creating keystore file /opt/zimbra/mailbox/etc/keystore…done.
**Installing CA to /opt/zimbra/conf/ca…done.

 

  • To check that the SSL certificate has been implemented successfully. Run the following command on zmcertmgr.

/opt/zimbra/bin/zmcertmgr viewdeployedcrt

Method 2: Use the Admin Console to mount the SSL Certificate

1) From here, download the Root certificate

2)From here, import the server and intermediate certificate

  • Go back to the Admin Console and open the Install Certificate wizard. Select the Commercially Signed Certificate installation option.
  • Select ssl certificate.crt as the certificate, root.ca as Root CA, and Intermediate CA.crt as Intermediate CA when asked to upload the certificate.
  • Tap Second and click Install. It will successfully instal your Commercial License.
Tags: