ZCS Administrator Guide 8.0
ZCS Administrator Guide 8.0
Network Edition


Managing ZCS Configuration > Install a SSL Certificate for a Domain

Install a SSL Certificate for a Domain
You can install an SSL certificate for each domain on a ZCS server. Zimbra Proxy must be installed on ZCS and correctly configured to support multiple domains. For each domain, a virtual host name and Virtual IP address are configured with the virtual domain name and IP address.
Each domain must be issued a signed commercial certificate that attests that the public key contained in the certificate belongs to that domain.
1.
zmprov md <domain> +zimbraVirtualHostName {domain.example.com} +zimbraVirtualIPAddress {1.2.3.4}
Note:
2.
Go to the administration console and edit the domain. Copy the domain’s issued signed commercial certificate’s and private key files to the Domain>Certificate page.
3.
Copy the root certificate and the intermediate certificates in descending order, starting with your domain certificate. This allows the full certificate chain to be validated.
4.
See your commercial certificate provider for details about how to remove the password.
5.
Click Save.
6.
7.
/opt/zimbra/libexec/zmdomaincertmgr deploycrts
8.
zmproxyctl stop
zmproxyctl start
The domain certificate is deployed to /opt/zimbra/conf/domaincerts.
Copyright © 2012 VMware Inc.