Certificate from company CA

[PNE]

Currently I am testing 5.0.4 GA on CentOS 4.6 while my production install is 4.5.4. I want to go with certificate issued by our company CA which is Microsoft Certification Services. (it works greate at 4.5.4). I create CSR. submit into CA, get certificate. However, when I try to install certificate and the root certificate via Admin extension certificate tool I am always getting this:

Your certificate was not installed due to error : system failure: XXXXX
ERROR: Unmatching certificate
(/opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/current.crt) and private key (/opt/zimbra/ssl/zimbra/commercial/commercial.key) pair.

Of course that our company CA is not trusted but I do not know if this is the reason. I have read a lot of posts here and in the wiki but could not find a solution that fits my case. Anyone to help me?

[PNE]

It is solved however I am not quite sure I can reproduce the whole solution. I made at least 3 mistakes I know about:

1. It is necessary to choose Base64 encoding when downloading certificate from Microsoft CA.

2. The template used to create cert has to be Web Server (IPSec does not work for that, but I am not sure if Administrator template would work)

3. There was a really nasty problem caused by system clock on the mailserver that was more than one hour late of the clock on the certificate server (DST time change did not work well). Thus certificate could not be installed because it was not yet valid by one hour!

[liveaverage]

Just wanted to thank you for posting this. You were spot-on with the Base 64 encoding requirement, as I spent a good 20-30 minutes wondering why DER encoding wasn't working! I also had to make sure I removed the Intermediate CA field (as it didn't exactly apply). I only used the Root CA & [server] certificate fields when importing Microsoft CA-generated certificates. I'm currently running Release 5.0.4_GA_2101.UBUNTU6 UBUNTU6 FOSS edition on a VMWare server (again on Ubuntut 6.06LTS).

Thanks for your help!