Transfer SSL certificates between servers

Backup/Transfer SSL Certificates Between Servers

   KB 2798        Last updated on 07/13/2015  




0.00
(0 votes)
 - This article is a Community contribution and may include unsupported customizations.
 - This is archive documentation, which means it is not supported or valid for recent versions of Zimbra Collaboration.
 - This article is a Work in Progress, and may be unfinished or missing sections.


  • Copy /opt/zimbra/ssl to /sslbk.
  • Create sslbk.zip from the directory /sslbk and transfer it to a holding server.
  • On the destination server stop the zimbra service.
  • As root transfer the sslbk.zip file from the holding server to the destination server.
  • Re-name the existing /opt/zimbra/ssl to ssl_old.
  • Un-pack the sslbk.zip file to the root directory as /sslbk.
  • Copy the /sslbk to /opt/zimbra/ and rename to ssl so that /opt/zimbra/ssl is re-created using the directory from the source server.
  • cd into the /opt/zimbra/bin directory
  • Deploy the cert ./zmcertmgr deploycrt comm /sslbk/zimbra/commercial/commercial.crt //sslbk/zimbra/commercial/commercial_ca.crt
  • Switch back to Zimbra user and restart Zimbra and then switch back to root and restart the Zimbra service at /etc/init.d/./zimbra restart

common error messages


If you see this message, then make sure to unzip the file sslbk.zip and replace /opt/zimbra/ssl with sslbk files.

[root@zim-lab-06 bin]# ./zmcertmgr deploycrt comm /sslbk/zimbra/commercial/commercial.crt //sslbk/zimbra/commercial/commercial_ca.crt
** Verifying /sslbk/zimbra/commercial/commercial.crt against /opt/zimbra/ssl/zimbra/commercial/commercial.key
XXXXX ERROR: Unmatching certificate (/sslbk/zimbra/commercial/commercial.crt) and private key (/opt/zimbra/ssl/zimbra/commercial/commercial.key) pair.
XXXXX ERROR: provided cert isn't valid


If you see a list of services that did not start post re-install of the SSL certificate, then restart the Zimbra service and
 may have to clear the PID number from the .pid files to force a refresh of zimbra process tracking.  /opt/zimbra/log

Verified Against: ZCS 5.0 Date Created: 2/24/2009
Article ID: https://wiki.zimbra.com/index.php?title=Transfer_SSL_certificates_between_servers Date Modified: 07/13/2015



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »

Jump to: navigation, search