Regenerate Self-Signed SSL Certificate - Single-Server
- This article is a Work in Progress, and may be unfinished or missing sections.
 Article Information |
|---|
| This article applies to the following ZCS versions. |
Regenerate Self-Signed SSL Certificate - Single-Server
Purpose
Regenerate the SSL certificate in a Zimbra single server environment.
Resolution
1. Begin by generating a new Certificate Authority (CA).
This step is optional and not required everytime you renew the self signed certificate.
/opt/zimbra/bin/zmcertmgr createca -new /opt/zimbra/bin/zmcertmgr deployca
2. Then generate a certificate signed by the CA that expires in 365 days with either wildcard or subject altnames.
/opt/zimbra/bin/zmcertmgr createcrt -new -days 365
3. Next, deploy the certificate.
/opt/zimbra/bin/zmcertmgr deploycrt self
4. To finish, verify the certificate was deployed.
/opt/zimbra/bin/zmcertmgr viewdeployedcrt
5. Restart zmcontrol to take the changes in effect. su - zimbra zmcontrol restart
Additional Content
- Link to a extended Wiki article.
