ZCS Administrator's Guide, Network Edition 4.5, Rev 2 11/07

zmcreatecert and zmcertinstall (For a Certificate)

The CLI command zmcreateca creates the signing certificate and zmcreatecert creates a new self-signed certificate. After a certificate is created, zmcertinstall is the CLI command to install it.

Tomcat must be stopped and then restarted after the certificate is installed.

Example of steps to use to stop tomcat, delete a certificate that is not working and then create a new certificate and install it.

1.	As root, type:

rm -rf /opt/zimbra/ssl
mkdir /opt/zimbra/ssl
chown zimbra:zimbra /opt/zimbra/ssl

2.	Type su - zimbra, then type the following all on one line

keytool -delete -alias my_ca -keystore /opt/zimbra/java/jre/lib/security/cacerts -storepass changeit

3.	Next, type the following on one line

keytool -delete -alias tomcat -keystore /opt/zimbra/tomcat/conf/keystore -storepass zimbra

4.	Type zmcreateca, press Enter

5.	Type zmcreatecert, press Enter

6.	Type zmcertinstall mailbox, press Enter

7.	Type tomcat stop, press Enter

8.	Type tomcat start, press Enter

ZCS Administrator's Guide, Network Edition 4.5, Rev 2 11/07