{"id":3066,"date":"2020-03-06T17:46:37","date_gmt":"2020-03-06T17:46:37","guid":{"rendered":"https:\/\/www.thesslstore.com\/knowledgebase\/?post_type=ht_kb&p=3066"},"modified":"2020-03-17T21:24:58","modified_gmt":"2020-03-17T21:24:58","slug":"install-ssl-certificate-zimbra-mail-server","status":"publish","type":"ht_kb","link":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-install\/install-ssl-certificate-zimbra-mail-server\/","title":{"rendered":"How to Install an SSL Certificate on Zimbra Mail Server"},"content":{"rendered":"\n

The following instructions will guide you through the SSL\/TLS Certificate installation process on \u201cZimbra Mail Server.\u201d If you still have not generated your certificate and completed the validation process, reference our CSR Generation Instructions<\/a>.<\/p>\n\n\n\n

What You’ll Need<\/h2>\n

1. Your server certificate<\/strong><\/p>\n

This is the certificate you received from the CA for your domain. You may have been received this via email. If not, you can download it by visiting your Account Dashboard and clicking on your order.<\/p>\n

2. Your intermediate certificates<\/strong><\/p>\n

These files allow the devices connecting to your server to identify the issuing CA. There may be more than one of these certificates. If you got your certificate in a ZIP folder, it should also contain the Intermediate certificate(s), which is sometimes referred to as a CA Bundle. If not, download the appropriate CA Bundle for your certificate.<\/p>\n

3. Your private key<\/strong><\/p>\n

This file should be on your server, or in your possession if you generated your CSR from a free generator tool.<\/p>\n\n\n\n

SSL\/TLS Certificate Installation Instructions for Zimbra Mail Server<\/h2>\n

You can install SSL Certificate in two ways:<\/p>\n

A. Zimbra Administration Console<\/strong> \u2013 Web Interface
B. Zimbra Certificate Manager<\/strong> – Command Line Interface (CLI)<\/p>\n\n\n\n

A. Installing SSL\/TLS Certificate using Zimbra Administration Console<\/h3>\n

1. Configure<\/h4>\n

In the main menu, click Configure.<\/p>\n\n\n\n

\"\"<\/figure><\/div>\n\n\n\n

2. Certificates – Install Certificate<\/h4>\n

Select Certificates<\/strong>. Then, click the gear icon on the top right (next to Help) and select Install Certificate<\/strong>.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

3. Select the Target Server<\/h4>\n

On the Select the Target Server<\/strong> tab, select your server from the Server Name drop-down menu. Click Next. <\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

4. Choose the Installation Option<\/h4>\n

On the Choose the Installation Option<\/strong> tab. Then, click the bubble for Install the commercially signed certificate<\/strong>.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

5. Review the Certificate Signing Request<\/h4>\n

Go to the last tab, Review the Certificate Signing Request<\/strong>. Verify that all of the CSR information is correct, then click Next.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

6. Upload the Certificate<\/h4>\n

Go back up to the Upload the Certificate<\/strong> tab where you will import each required file to the server.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Each of these files should be emailed to the admin and technical contacts for the certificate, and can also be downloaded in a zipped folder from your account. <\/p>\n

In the example image, the certificate is from Comodo and uses Comodo’s specific root and intermediate certificates. Please feel free to contact our support team if you have any questions about which certificate files you should use for your installation.<\/p>\n\n\n

7. Install the Certificate<\/h4>\n

Finally, go to the Install the Certificate<\/strong> tab and click Install<\/strong>.<\/p>\n\n\n

\"\"<\/figure>\n\n\n\n

8. Restart<\/h4>\n

To apply the changes you\u2019ve just made, you\u2019ll need to restart Zimbra services using the Command Line Interface. Enter these commands to switch to Zimbra user:<\/p>\n

sudo su<\/strong>
su zimbra<\/strong><\/p>\n

Once the user is switched to Zimbra user, restart the services using following command:<\/p>\n

zmcontrol restart<\/strong><\/p>\n

Congratulations!!! You\u2019ve done it. You\u2019ve successfully installed your SSL certificate on your Zimbra server. Wasn\u2019t so hard, was it?<\/p>\n\n\n\n

B. Installing SSL\/TLS Certificate using Zimbra Certificate Manager (Command Line Interface)<\/h3>\n

Zimbra package comes with “zmcertmgr” tool for handling SSL Certificates.<\/p>\n

For Version 8.6 or lower, this tool must be accessed as root. If you have version 8.7 or later, you should run this tool as zimbra user. Run the below command in order to switch from default user to zimbra user.<\/p>\n

sudo su<\/strong>
su zimbra<\/strong><\/p>\n\n\n\n

1. Download and save the root CA certificate to a temporary file.<\/h4>\n\n\n\n

For example: \/tmp\/ca.crt<\/p>\n\n\n\n

These files should be labeled in the zipped folder you can download from your account.<\/p>\n\n\n\n

2. Combine root and intermediate CA certificates into a temporary file.<\/h4>\n\n\n\n
cat \/tmp\/ca_intermediary.crt \/tmp\/ca.crt > \/tmp\/ca_chain.crt<\/strong><\/pre>\n\n\n\n
3. Verify your certificate<\/h4>\n\n\n\n
\/opt\/zimbra\/bin\/zmcertmgr verifycrt comm\n\/opt\/zimbra\/ssl\/zimbra\/commercial\/commercial.key <\/strong>\n\/opt\/server_domain_com.crt\n\/opt\/server_domain_com.ca-bundle<\/strong><\/pre>\n\n\n\n
4. Deploy your SSL certificate<\/h4>\n\n\n\n
\/opt\/zimbra\/bin\/zmcertmgr deploycrt comm\n\/opt\/server_domain_com.crt\n\/opt\/server_domain_com.ca-bundle<\/strong><\/pre>\n\n\n\n
5. Verify the certificate deployment<\/h4>\n\n\n\n
\/opt\/zimbra\/bin\/zmcertmgr viewdeployedcrt<\/strong><\/pre>\n\n\n\n
6. Restart Zimbra to apply changes<\/h4>\n\n\n\n
Enter these commands to switch to Zimbra user:<\/p>\n\n\n\n
sudo su<\/strong>
su zimbra<\/strong><\/p>\n\n\n\n
Once the default user is switched to Zimbra user, run the following command to restart the server:<\/p>\n\n\n\n
zmcontrol restart<\/strong><\/p>\n\n\n\n
Your certificate should now be installed.<\/p>\n","protected":false},"excerpt":{"rendered":"
The following instructions will guide you through the SSL\/TLS Certificate installation process on \u201cZimbra Mail Server.\u201d If you still have not generated your certificate and completed the validation process, reference our CSR Generation Instructions. What You’ll Need 1. Your server certificate This is the certificate you received from the CA…<\/p>\n","protected":false},"author":1,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"ht-kb-category":[24],"ht-kb-tag":[],"class_list":["post-3066","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-ssl-install"],"yoast_head":"\nHow to Install an SSL Certificate on Zimbra Mail Server - Knowledge Base<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-install\/install-ssl-certificate-zimbra-mail-server\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"How to Install an SSL Certificate on Zimbra Mail Server - Knowledge Base\" \/>\n<meta property=\"og:description\" content=\"The following instructions will guide you through the SSL\/TLS Certificate installation process on \u201cZimbra Mail Server.\u201d If you still have not generated your certificate and completed the validation process, reference our CSR Generation Instructions. What You’ll Need 1. Your server certificate This is the certificate you received from the CA...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-install\/install-ssl-certificate-zimbra-mail-server\/\" \/>\n<meta property=\"og:site_name\" content=\"Knowledge Base\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/thesslstoredotcom\" \/>\n<meta property=\"article:modified_time\" content=\"2020-03-17T21:24:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.thesslstore.com\/knowledgebase\/wp-content\/uploads\/2020\/03\/zimbra-click-configure.png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@thesslstore\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"3 minutes\" \/>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How to Install an SSL Certificate on Zimbra Mail Server - Knowledge Base","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-install\/install-ssl-certificate-zimbra-mail-server\/","og_locale":"en_US","og_type":"article","og_title":"How to Install an SSL Certificate on Zimbra Mail Server - Knowledge Base","og_description":"The following instructions will guide you through the SSL\/TLS Certificate installation process on \u201cZimbra Mail Server.\u201d If you still have not generated your certificate and completed the validation process, reference our CSR Generation Instructions. What You’ll Need 1. Your server certificate This is the certificate you received from the CA...","og_url":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-install\/install-ssl-certificate-zimbra-mail-server\/","og_site_name":"Knowledge Base","article_publisher":"https:\/\/www.facebook.com\/thesslstoredotcom","article_modified_time":"2020-03-17T21:24:58+00:00","og_image":[{"url":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-content\/uploads\/2020\/03\/zimbra-click-configure.png","type":"","width":"","height":""}],"twitter_card":"summary_large_image","twitter_site":"@thesslstore","twitter_misc":{"Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-install\/install-ssl-certificate-zimbra-mail-server\/","url":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-install\/install-ssl-certificate-zimbra-mail-server\/","name":"How to Install an SSL Certificate on Zimbra Mail Server - Knowledge Base","isPartOf":{"@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-install\/install-ssl-certificate-zimbra-mail-server\/#primaryimage"},"image":{"@id":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-install\/install-ssl-certificate-zimbra-mail-server\/#primaryimage"},"thumbnailUrl":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-content\/uploads\/2020\/03\/zimbra-click-configure.png","datePublished":"2020-03-06T17:46:37+00:00","dateModified":"2020-03-17T21:24:58+00:00","breadcrumb":{"@id":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-install\/install-ssl-certificate-zimbra-mail-server\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.thesslstore.com\/knowledgebase\/ssl-install\/install-ssl-certificate-zimbra-mail-server\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-install\/install-ssl-certificate-zimbra-mail-server\/#primaryimage","url":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-content\/uploads\/2020\/03\/zimbra-click-configure.png","contentUrl":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-content\/uploads\/2020\/03\/zimbra-click-configure.png","width":358,"height":255},{"@type":"BreadcrumbList","@id":"https:\/\/www.thesslstore.com\/knowledgebase\/ssl-install\/install-ssl-certificate-zimbra-mail-server\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.thesslstore.com\/knowledgebase\/"},{"@type":"ListItem","position":2,"name":"How to Install an SSL Certificate on Zimbra Mail Server"}]},{"@type":"WebSite","@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#website","url":"https:\/\/www.thesslstore.com\/knowledgebase\/","name":"Knowledge Base","description":"TheSSLstore","publisher":{"@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.thesslstore.com\/knowledgebase\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#organization","name":"The SSL Store\u2122","url":"https:\/\/www.thesslstore.com\/knowledgebase\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#\/schema\/logo\/image\/","url":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-content\/uploads\/2017\/04\/thesslstore.jpg","contentUrl":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-content\/uploads\/2017\/04\/thesslstore.jpg","width":300,"height":300,"caption":"The SSL Store\u2122"},"image":{"@id":"https:\/\/www.thesslstore.com\/knowledgebase\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/thesslstoredotcom","https:\/\/x.com\/thesslstore","https:\/\/www.linkedin.com\/company\/the-ssl-store","https:\/\/www.youtube.com\/user\/thesslstore"]}]}},"_links":{"self":[{"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/ht-kb\/3066","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/ht-kb"}],"about":[{"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/types\/ht_kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/comments?post=3066"}],"version-history":[{"count":0,"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/ht-kb\/3066\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/media?parent=3066"}],"wp:term":[{"taxonomy":"ht_kb_category","embeddable":true,"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/ht-kb-category?post=3066"},{"taxonomy":"ht_kb_tag","embeddable":true,"href":"https:\/\/www.thesslstore.com\/knowledgebase\/wp-json\/wp\/v2\/ht-kb-tag?post=3066"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}