Here is a little summary of all steps:
(a) as root: cd /opt/zimbra/ssl; mkdir bak; mv * bak
(b) as zimbra:
(b1) to get the password: zmlocalconfig -s zimbra_ldap_password
(b2) ldapmodify -x -h fqdn.server.tld -D "uid=zimbra,cn=admins,cn=zimbra" -W
Code:
dn: cn=config,cn=zimbra
changetype:modify
delete: zimbraCertAuthorityCertSelfSigned
^D
(b3) ldapmodify -x -h fqdn.server.tld -D "uid=zimbra,cn=admins,cn=zimbra" -W
Code:
dn: cn=config,cn=zimbra
changetype:modify
delete: zimbraCertAuthorityKeySelfSigned
^D
(c) as root: run /opt/zimbra/bin/zmcertmgr createca
(d) as root: run /opt/zimbra/bin/zmcertmgr deployca
(e) as root: run /opt/zimbra/bin/zmcertmgr install self -new
(f) as root: su - zimbra zmcontrol stop; su - zimbra zmcontrol start
^D is Control-D