Installing a GeoTrust Commectial Certificate on Zimbra 8

Posted: November 16, 2017 in Linux

https://knowledge.symantec.com/support/ssl-certificates-support/index?page=content&id=SO20541

https://wiki.zimbra.com/wiki/Installing_a_GeoTrust_Commercial_Certificate

Login as root :

1. Copy certificate your existing to /opt/zimbra/ssl/zimbra/commercial/with name commercial.key, commercial.crt and commercial_ca.crt

clip_image002

clip_image003

2. Commercial_ca.crt from ca_bundle.crt or Intermediate.crt and Root.crt (merge)

—–BEGIN CERTIFICATE—–

Intermidiate

—–END CERTIFICATE—–

—–BEGIN CERTIFICATE—–

Root

—–END CERTIFICATE—–

clip_image004

3. Login as zimbra admin , verify cert and key match

# su zimbra

zimbra@mail:/root$ /opt/zimbra/bin/zmcertmgr verifycrt comm

** Verifying ‘/opt/zimbra/ssl/zimbra/commercial/commercial.crt’ against ‘/opt/zimbra/ssl/zimbra/commercial/commercial.key’

Certificate ‘/opt/zimbra/ssl/zimbra/commercial/commercial.crt’ and private key ‘/opt/zimbra/ssl/zimbra/commercial/commercial.key’ match.

** Verifying ‘/opt/zimbra/ssl/zimbra/commercial/commercial.crt’ against ‘/opt/zimbra/ssl/zimbra/commercial/commercial_ca.crt’

Valid certificate chain: /opt/zimbra/ssl/zimbra/commercial/commercial.crt: OK

zimbra@mail:/root$

clip_image006

4. Deploy Cert

zimbra@mail:~/ssl/zimbra/commercial$ /opt/zimbra/bin/zmcertmgr deploycrt comm commercial.crt commercial_ca.crt

clip_image008

5. To verify if the ssl certificate has been successfully deployed. Run the following zmcertmgr command

clip_image010

6. Restart Zimbra

zimbra@mail:~/ssl/zimbra/commercial$ zmcontrol restart

clip_image011

7. Try to access your zimbra and check the certificate

clip_image013

clip_image015

CMIIW, Thanks Smile

Leave a Reply

Your email address will not be published. Required fields are marked *