ZCS Administrator's Guide, Network Edition 4.5, Rev 2 11/07
Table of Contents Previous Next Index


Appendix A   Command-Line Utilities : zmcreatecert and zmcertinstall (For a Certificate)

zmcreatecert and zmcertinstall (For a Certificate)
The CLI command zmcreateca creates the signing certificate and zmcreatecert creates a new self-signed certificate. After a certificate is created, zmcertinstall is the CLI command to install it.
Tomcat must be stopped and then restarted after the certificate is installed.
Example of steps to use to stop tomcat, delete a certificate that is not working and then create a new certificate and install it.
1.
rm -rf /opt/zimbra/ssl
mkdir /opt/zimbra/ssl
chown zimbra:zimbra /opt/zimbra/ssl
2.
Type su - zimbra, then type the following all on one line
keytool -delete -alias my_ca -keystore /opt/zimbra/java/jre/lib/security/cacerts -storepass changeit
3.
keytool -delete -alias tomcat -keystore /opt/zimbra/tomcat/conf/keystore -storepass zimbra
4.
Type zmcreateca, press Enter
5.
Type zmcreatecert, press Enter
6.
Type zmcertinstall mailbox, press Enter
7.
Type tomcat stop, press Enter
8.
Type tomcat start, press Enter

Appendix A   Command-Line Utilities : zmcreatecert and zmcertinstall (For a Certificate)

Table of Contents Previous Next Index
ZCS Administrator's Guide, Network Edition 4.5, Rev 2 11/07
Copyright © 2007 Zimbra Inc.