Zimbra Collaboration Suite 7.0
Zimbra Collaboration Suite 7.0
Administrator's Guide
Open Source Edition

Managing ZCS Configuration > Installing a SSL Certificate for a Domain

Installing a SSL Certificate for a Domain
An SSL certificate can be installed for each domain on a ZCS server. Zimbra Proxy must be installed on ZCS and correctly configured to support multiple domains. For each domain, a virtual host name and Virtual IP address are configured with the virtual domain name and IP address.
Each domain must be issued a signed commercial certificate that attests that the public key contained in the certificate belongs to that domain.
To install the SSL Certificate for a Domain:
Configure the Zimbra Proxy Virtual Host Name and IP Address. Type zmprov md <domain> +zimbraVirtualHostName {domain.example.com} +zimbraVirtualIPAddress {}
Go to the administration console and edit the domain. Copy the domain’s issued signed commercial certificate’s and private key files to the Domain>Certificate tab.
Copy the root certificate and the intermediate certificates in descending order, starting with your domain certificate. This allows the full certificate chain to be validated.
Make sure you remove any password authentication from the private key before the certificate is saved. See your commercial certificate provider for details about how to remove the password.
Click Save.
The domain certificate is deployed to /opt/zimbra/conf/domaincerts.