Zimbra Releases/8.7.0/Single Server Installation

Revision as of 01:07, 15 July 2016 by Mmedellin (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Performing a Single-Server Installation

The Zimbra Collaboration includes the Zimbra MTA, the Zimbra LDAP server, and the Zimbra mailbox server. In a single-server installation, all components are installed on one server and require no additional manual configuration.

This installation guide is a quick start guide that describes the basic steps needed to install and configure Zimbra Collaboration in a direct network connect environment. In this environment, the Zimbra server is assigned a domain for which it receives mail, and a direct network connection to the Internet. When Zimbra Collaboration is installed, you will be able to log on to the Zimbra administration console to manage the domain and provision accounts. The accounts you create are able to send and receive external email.

Important Notice About Single Server Installations

Zimbra Collaboration is designed to be the only application suite installed on the server. Zimbra Collaboration bundles and installs, as part of the installation process various other third party and open source software, including Apache Jetty, Postfix, and OpenLDAP®. The versions installed have been tested and configured to work with the Zimbra software. See the Administrator’s Guide for a complete list of software.

A Zimbra license is required in order to create accounts on the Zimbra Collaboration Network Edition. You cannot install Zimbra Collaboration without a license.

The following table shows the default port settings when Zimbra Collaboration is installed.

Zimbra Port Mapping

Remote Queue Manager 22
Postfix 25
POP3 110
IMAP 143
LDAP 389
Mailboxd IMAP SSL 993
Mailboxd Pop SSL 995
Mailboxd LMTP 7025

Important:You cannot have any other web server, database, LDAP, or MTA server running, when you install the Zimbra software. If you have installed any of the applications before you install Zimbra software, disable these applications. During the Zimbra Collaboration installation, Zimbra makes global system changes that may break applications that are on your server.

Installation Prerequisites

In order to successfully install and run Zimbra Collaboration, ensure your system meets the requirements described in this section. System administrators should be familiar with installing and managing email systems.

System Requirements

ServersEvaluation and Testing
  • Intel/AMD 64-bit CPU 1.5 GHz
  • RAM requirements:
    • For single server installations, a minimum of 8GB of RAM is required.
    • For multi-server installations, contact Zimbra sales for recommendations.
  • 5 GB free disk space for software and logs
  • Temp file space for installs and upgrades*
  • Additional disk space for mail storage

Production environments

  • Intel/AMD 2.0 GHZ+ 64-bit CPU
  • RAM requirements:
    • For single server installations, a minimum of 8GB of RAM is required.
    • For multi-server installations, contact Zimbra sales for recommendations.
  • Temp file space for installs and upgrades*
  • 10 GB free disk space for software and logs (SATA or SCSI for performance, and RAID/Mirroring for redundancy)
  • Additional disk space for mail storage
  • Temp files space: The zimbra-store requires 5GB for / opt/zimbra, plus additional space for mail storage. The other nodes require 100MB.

General Requirements

  • Firewall Configuration should be set to “No firewall”.
  • RAID-5 is not recommended for installations with more than 100 accounts.
Operating System (Network Edition)

The following operating systems are supported:

  • Red Hat® Enterprise Linux® 7 (64-bit)
  • CentOS Linux® 7 (64-bit)
  • Red Hat Enterprise Linux 6 (64-bit), patch level 4 or later is required
  • CentOS Linux 6 (64-bit), patch level 4 or later is required
  • Ubuntu 14.04 LTS Server Edition (64-bit)
  • Ubuntu 12.04.4 LTS Server Edition (64-bit) running the saucy (3.11) or later kernel is required. Note: If the original install was done with Ubuntu 12.04.2 or earlier, manual intervention is required to switch to the saucy (3.11) or later kernel series. See [https:// wiki.ubuntu.com/Kernel/LTSEnablementStack https:// wiki.ubuntu.com/Kernel/LTSEnablementStack] for further information.
Virtualization (Network Edition)

The following hypervisors are supported: * VMware vSphere 4.x * VMware vSphere 5.x

Operating System (Open Source Edition) In addition to supporting the operating systems listed above for the Network Edition, other operating system versions are available for the Open Source Edition. Check the Zimbra Open Source Downloads page on www.zimbra.com.
File Systems

The following file systems are supported: * ext3 or ext4 file system for Linux deployments * NFS for backup only

Other Dependencies

Netcat (nc) is required on all operating systems using Zimbra Collaboration. The nc utility must be installed prior to installation or upgrading.

For SUSE and Ubuntu systems, disable AppArmor and verify that services are not running before installing Zimbra Collaboration.

For Red Hat Enterprise, Fedora Core and SUSE operating systems, the server must also have the following installed:

  • NPTL. Native POSIX Thread Library
  • Sudo. Superuser, required to delegate admins.
  • libidn. For internationalizing domain names in applications (IDNA)
  • GMP. GNU Multiple-Precision Library.

For Ubuntu 14 and Ubuntu 12:

  • Sudo
  • libidn11
  • libpcre3
  • libexpat1
  • libgmp3c2
  • SSH client software to transfer and install the Zimbra Collaboration software.
  • Valid DNS configured with an A record and MX record.
  • Servers should be configured to run Network Time Protocol (NTP) on a scheduled basis.
Administrator Computers

Note: Other configurations may work.

The following operating system/browser combinations are supported:

Windows XP with required updates, Vista, Windows 7, or Windows 8 with one of the following:

  • Internet Explorer 8.0 and higher
    • IE8.x for XP
    • IE9.x and higher for Vista/Windows 7
    • IE10 and higher for Windows 8
  • The latest stable release of:
    • Firefox
    • Safari
    • Google Chrome

Mac OS X 10.5, 10.6, 10.7, or 10.8 with one of the following:

  • The latest stable release of:
    • Firefox
    • Safari
    • Google Chrome

Linux (Red Hat, Ubuntu, Fedora, or SUSE) with one of the following:

  • The latest stable release of:
    • Firefox
    • Google Chrome
Administrator Console Monitor Display minimum resolution 1024 x 768
End User Computers using Zimbra Web Client

Note: Other configurations may work.

For Zimbra Web Client - Advanced & Standard version


  • Intel/AMD/Power PC CPU 750MHz
  • 256MB RAM


  • Intel/AMD/Power PC CPU 1.5GHz
  • 512MB RAM

The following operating system/browser combinations are supported:

Windows XP with required updates, Vista, Windows 7, or Windows 8 with one of the following:

  • Internet Explorer 8.0 and higher
    • IE8.x for XP
    • IE9.x and higher for Vista/Windows 7
    • IE10 and higher for Windows 8
  • The latest stable release of:
    • Firefox
    • Safari
    • Google Chrome

Mac OS X 10.5, 10.6, 10.7, or 10.8 with one of the following:

  • The latest stable release of:
    • Firefox
    • Safari
    • Google Chrome

Linux (Red Hat, Ubuntu, Fedora, or SUSE) with one of the following:

  • The latest stable release of:
    • Firefox
    • Google Chrome
End User Computers Using Other Clients


  • Intel/AMD/Power PC CPU 750MHz
  • 256MB RAM


  • Intel/AMD/Power PC CPU 1.5GHz
  • 512MB RAM

Operating system POP/IMAP combinations

  • Windows XP SP 3, Vista SP 2, Windows 7 with Outlook Express 6, Outlook 2003, (MAPI), Thunderbird
  • Fedora Core 4 or later with Thunderbird
  • Mac OS X 10.4 or later with Apple Mail

Accessibility and Screen Readers Zimbra recommends that customers requiring use of screen readers for accessibility leverage the use of the Standard Zimbra Web Client (HTML). Zimbra continues to invest in improving the accessibility of this interface.

Exchange Web Services

EWS Clients

  • Outlook 2011 (MAC only), Apple Desktop Clients (OS X, 10.8+)

EWS Interoperability

  • Exchange 2007+
MonitorDisplay minimum resolution: 1024 x 768
Internet Connection Speed128 kbps or higher

Zimbra Connector for Outlook (Network Edition Only)

Operating System
  • Windows 10
  • Windows 8
  • Windows 7
  • Vista
Microsoft Outlook
  • Outlook 2013: 32-bit and 64-bit editions of Microsoft Outlook are supported.
  • Outlook 2010: 32-bit and 64-bit editions of Microsoft Outlook are supported.
  • Outlook 2007: Client computers must have Microsoft Office Outlook 2007 SP3 or later installed.

Zimbra Mobile (Network Edition Only)

Zimbra Mobile (MobileSync) provides mobile data access to email, calendar, and contacts for users of selected mobile operating systems, including:

Smartphone Operating Systems:

  • iOS6, iOS7, iOS8, iOS9
  • Android 2.3 and above
  • Windows Mobile 6.0 and above
  • Microsoft Outlook using the Exchange ActiveSync (EAS)

Non-Smartphone Operating Systems:

  • Various device/operating system combinations with mobile WAP browser.

Zimbra Touch Client (Network Edition Only)

Supported devices for the Zimbra Touch Client include:
  • iOS6+: iPad®, iPad mini®, iPhone®, iPod touch®
  • Android 4.0+: Nexus 7, Nexus 10, Samsung Galaxy Tab, Samsung Galaxy S® III, Samsung Galaxy S® 4, Galaxy Nexus

Available Languages

End User Translations

Component Category Languages
Zimbra Web Client Application/UI Arabic, Basque (EU), Chinese (Simplified PRC and Traditional HK), Danish, Dutch, English (AU, UK, US), French, French Canadian, German, Hindi, Hungarian, Italian, Japanese, Korean, Malay, Polish, Portuguese (Brazil), Portuguese (Portugal), Romanian, Russian, Spanish, Swedish, Thai, Turkish, Ukrainian
Zimbra Web Client - Online Help (HTML) Feature Documentation Dutch, English, Spanish, French, Italian, Japanese, German, Portuguese (Brazil), Chinese (Simplified PRC and Traditional HK), Russian
Zimbra Web Client - End User Guide (PDF) Feature Documentation English
Zimbra Connector for Microsoft Outlook Installer + Application/UI Arabic, Basque (EU), Chinese (Simplified PRC and Traditional HK), Danish, Dutch, English (AU, UK, US), French, French Canadian, German, Hindi, Hungarian, Italian, Japanese, Korean, Malay, Polish, Portuguese (Brazil), Portuguese (Portugal), Romanian, Russian, Spanish, Swedish, Thai, Turkish, Ukrainian
Zimbra Connector for Microsoft Outlook - End User Guide (PDF) Feature Documentation English
Zimbra Admin Console Application Arabic, Basque (EU), Chinese (Simplified PRC and Traditional HK), Danish, Dutch, English (AU, UK, US), French, French Canadian, German, Hindi, Hungarian, Italian, Japanese, Korean, Malay, Polish, Portuguese (Brazil), Portuguese (Portugal), Romanian, Russian, Spanish, Swedish, Turkish, Ukrainian
Zimbra Admin Console Online Help (HTML) Feature Documentation English
"Documentation" Install + Upgrade / Admin Manual / Migration / Import / Release Notes / System Requirements Guides English
Zimbra Connector for Microsoft Outlook - Admin Guide (PDF) Install + Configuration Guide English

Note: To find SSH client software, go to Download.com at http://www.download.com/ and search for SSH. The list displays software that can be purchased or downloaded for free. An example of a free SSH client software is PuTTY, a software implementation of SSH for Win32 and Unix platforms. To download a copy go to http://putty.nl

Modifying Operating System Configurations

Zimbra Collaboration runs on one of several operating systems, including Ubuntu® LTS, Red Hat® Enterprise Linux, and SUSE® Linux Enterprise.

Installation modifications for frequently used operating systems are described in individual configuration documents found on the Zimbra Collaboration documentation website. Other operating systems may require similar modifications, and you can use the information contained in these documents as a reference to gauge whether your operating system might need to be modified.

A full default installation of the Linux distribution that you select is required.

Note: Zimbra recommends that the operating systems you use are updated with the latest patches that have been tested with Zimbra Collaboration. See the latest release notes to see the operating systems patch list that has been tested with Zimbra Collaboration.

Configuring High-Fidelity Document Preview (Network Edition Only)

The high-fidelity document preview feature requires the installation of LibreOffice or the LibreOffice-headless package, depending on the operating system you are running.

If the LibreOffice is installed, the system is automatically configured to use the high-fidelity document preview. If LibreOffice is not installed, the preview engine from prior Zimbra Collaboration releases is used.

This can be accomplished with the Linux package management systems:

  • For RHEL, install the libreoffice-headless package:
yum install libreoffice
yum install libreoffice-headless
  • For SLES, install libreoffice:
yast2 -i libreoffice
  • For Ubuntu, install libreoffice:
apt-get install libreoffice

Install Language and Font Packages

Confirm you have the appropriate language packs or fonts installed for LibreOffice to properly view documents and attachments. For example:

  • If using Ubuntu 12.04 and viewing East Asian languages, be sure to install:
apt-get install libreoffice-l10n-*
apt-get install ttf-vlgothic
  • If using Ubuntu 14.04 and viewing East Asian languages, be sure to install:
apt-get install libreoffice-l10n-*
apt-get install fonts-vlgothic
  • If using RHEL, be sure to install apt-get install:

DNS Configuration Requirement

In order to send and receive email, the Zimbra MTA must be configured in DNS with both A and MX records. For sending mail, the MTA uses DNS to resolve hostnames and email-routing information. To receive mail, the MX record must be configured correctly to route the message to the mail server.

During the installation process, Zimbra Collaboration checks to see if you have an MX record correctly configured. If it is not, an error is displayed suggesting that the domain name have an MX record configured in DNS.

You must configure a relay host if you do not enable DNS. After Zimbra Collaboration is installed, go to the Global Settings>MTA tab on the administration console and uncheck Enable DNS lookups. Enter the relay MTA address to use for external delivery.

Note:Even if a relay host is configured, an MX record is still required if the Zimbra Collaboration server is going to receive email from the Internet.

Overview of Installation Process

When you run the install script, the process verifies that the correct prerequisite Zimbra application packages are available to be installed.

Zimbra Application Packages

Zimbra architecture includes open-source integrations using industry standard protocols. The third-party software has been tested and configured to work with the Zimbra software.

The following describes the Zimbra packages that are installed.

  • Zimbra Core: This package includes the libraries, utilities, monitoring tools, and basic configuration files. Zimbra Core is automatically installed on each server.
  • Zimbra Store: The Zimbra store includes the components for the mailbox server, including Jetty, which is the servlet container the Zimbra software runs within. The Zimbra mailbox server includes the following components:
    • Data store: The data store is a MariaDB© database.
    • Message store: The message store is where all email messages and file attachments reside.
    • Index store: Index and search technology is provided through Lucene. Index files are maintained for each mailbox.
    • Web application services: The Jetty web application server runs web applications (webapps) on any store server. It provides one or more web application services.
  • Zimbra LDAP:User authentication is provided through OpenLDAP® software. Each account on the Zimbra server has a unique mailbox ID that is the primary point of reference to identify the account. The OpenLDAP schema has been customized for Zimbra Collaboration. The Zimbra LDAP server must be configured before the other servers. You can set up LDAP replication, configuring a master LDAP server and replica LDAP servers.
  • Zimbra MTA: Postfix is the open source mail transfer agent (MTA) that receives email via SMTP and routes each message to the appropriate Zimbra mailbox server using Local Mail Transfer Protocol (LMTP). The Zimbra MTA also includes the anti-virus and anti-spam components.
  • Zimbra Proxy: Zimbra Proxy is a high-performance reverse proxy service for passing IMAP[S]/POP[S]/HTTP[S] client requests to other internal ZCS services.This package is normally installed on the MTA server(s) or on its own independent server(s). When the zimbra-proxy package is installed, the proxy feature is enabled by default. Installing the Zimbra Proxy is highly recommended, and required if using a separate web application server.
  • Zimbra Memcached: Memcached is automatically selected when the zimbra-proxy is installed. At least one server must run zimbra-memcached when the proxy is in use. You can use a single memcached server with one or more Zimbra proxies.
  • Zimbra SNMP: Installing the Zimbra SNMP package is optional. If you choose to install zimbra-SNMP for monitoring, this package should be installed on every Zimbra server.
  • Zimbra Logger: Installing the Zimbra Logger package is optional and is installed on one mailbox server. The Zimbra Logger installs tools for syslog aggregation and reporting. If you do not install Logger, the server statistics section of the administration console will not display. Note: The Logger package must be installed at the same time as the mailbox server.
  • Zimbra Spell: Installing the Zimbra Spell package is optional. Aspell is the open source spell checker used on the Zimbra Web Client.
  • Zimbra Apache: This package is installed automatically when Zimbra Spell or Zimbra Convertd is installed.

The Zimbra server configuration is menu driven. The installation menu shows you the default configuration values. The menu displays the logical host name and email domain name [mailhost.example.com] as configured on the computer. You can change any of the values. For single server installs, you must define the administrator’s password, which you use to log on to the administration console, and you specify the location of the Zimbra license xml file.

Downloading the Zimbra Software

Obtain the Zimbra Collaboration software download and save to the computer from which you will install the software.

Zimbra License Requirements (Network Edition Only)

Zimbra Collaboration licensing gives administrators better visibility and control into the licensed features they plan to deploy. The following is a summary of the feature attributes of a Zimbra Collaboration network edition license.

  • Accounts limit. The maximum number of accounts you can create and the number of accounts created are shown.
  • Mobile accounts limit. The maximum number of accounts that can have the native mail mobile feature enabled.
  • Touch Client accounts limit. The maximum number of accounts that can have the touch client mobile feature enabled.
  • MAPI accounts limit. The maximum number of accounts that can use Zimbra Connector for Microsoft Outlook (ZCO).
  • Exchange Web Services (EWS) accounts limit. The maximum number of

accounts that can use EWS for connecting to an Exchange server.

  • High-Fidelity Document Preview: The maximum number of accounts that can use the High-Fidelity document preview. LibreOffice must be installed.
  • Archiving Accounts limit. The maximum number of archive accounts that can be created. The archive feature must be installed.

Zimbra License Requirements

A Zimbra license is required in order to create accounts in the Network Edition Zimbra Collaboration.

Several types of licenses are available:

  • Trial. You can obtain a free Trial license from the Zimbra website, at www.zimbra.com. The trial license allows you to create up to 50 users. It expires in 60 days.
  • Trial Extended. You can obtain a Trial Extended license from Zimbra Sales by contacting sales@zimbra.com or calling 1-650-427-5701. This license allows you to create up to 50 users and is valid for an extended period of time.
  • Subscription. You must purchase the Zimbra Subscription license. This license is valid for a specific Zimbra Collaboration system and is encrypted with the number of Zimbra accounts (seats) you have purchased, the effective date, and expiration date of the subscription license.
  • Perpetual. You must purchase the Zimbra Perpetual license. This license is similar to a subscription license and is valid for a specific Zimbra Collaboration system, is encrypted with the number of Zimbra accounts (seats) you have purchased, the effective date, and an expiration date of 2099-12-31. When you renew your support agreement, no new perpetual license is sent to you, but your Account records in the systems is updated with your new support end date.

License Usage by Zimbra Collaboration Account Type

A mailbox license is required for an account assigned to a person, including accounts created for archiving. Distribution lists, aliases, locations and resources do not count against the license.

Below is a description of Zimbra Collaboration accounts and if they impact your license limit.

  • System accounts. System accounts are specific accounts used by Zimbra Collaboration. They include the spam filter accounts for junk mail (spam and ham), virus quarantine account for email messages with viruses, and GALsync account if you configure GAL for your domain. Do not delete these accounts! These accounts do not count against your license.
  • Administrator account. Administrator accounts count against your license.
  • User accounts. User accounts count against your license account limit.

When you delete an account, the license account limit reflects the change.

  • Alias account. Aliases do not count against your license.
  • Distribution list. Distribution lists do not count against your license.
  • Resource account. Resource accounts (location and resources) do not count against your ZCS license.

License Activation

All network edition installations require license activation. New installations have a 10 day grace period from the license issue date before requiring activation. Your license can be activated from the administration console by selecting Configure>Global Settings>License page, then clicking Activate License in the toolbar. You can also activate your license from the command line interface.

Upgraded Zimbra Collaboration versions require an immediate activation to maintain network feature functionality.

Automatic License Activation

Licenses are automatically activated if the Zimbra Collaboration server has a connection to the Internet and can communicate with the Zimbra License server. If you are unable to automatically activate your license, see the next section Manual License Activation.

Manual License Activation

For systems that do not have external access to the Zimbra License server, you can use the Zimbra Support Portal to manually activate your license. Go to the Zimbra website at www.zimbra.com and click on the Support page to display the Zimbra Technical Support page. Click on the Support Portal Login button to display the Zimbra Support Portal page. Enter your email and password to log in.

License Not Installed or Activated

If you fail to install or activate your Zimbra Collaboration server license, the following scenarios describe how your Zimbra Collaboration server will be impacted.

  • License is not installed. If a license is not installed, the Zimbra Collaboration defaults to single user mode where all features limited by license are limited to one user.
  • License is not valid. If the license file is forged or could not be validated for other reasons, the Zimbra Collaboration defaults to single user mode.
  • License is not activated. A license activation grace period is 10 days. If for some reason the license is never activated, the Zimbra Collaboration defaults to single user mode.
  • License is in future. If the license starting date is still in the future, the Zimbra Collaboration defaults to single user mode.
  • License is in grace period. If the license ending date has passed and is within the 30 day grace period, all features limited by license are still enabled, but administrators may see license renewal prompts.
  • License expired. If the license ending date has passed and the 30 day grace period expired, the Zimbra Collaboration server defaults to the feature set of the Open Source Edition.

Obtaining a License

Go to Zimbra’s Website to obtain a trial license from the Network Downloads area. Contact Zimbra sales regarding a trial extended license, or to purchase a subscription license or perpetual license, by emailing sales@zimbra.com or calling 1-650-427-5701.

The subscription and perpetual license can only be installed on the Zimbra Collaboration system for which it is purchased. Only one Zimbra license is required for your Zimbra Collaboration environment. This license sets the number of accounts that can be created.

Current license information, including the number of accounts purchased, the number of accounts used, and the expiration date, can be viewed from Configure>Global Settings>License page on the administration console.

Basic Configuration

The default configuration installs the Zimbra-LDAP, the Zimbra-MTA with anti-virus and anti-spam protection, the Zimbra mailbox server, the SNMP monitoring tools (optional), Zimbra-spell (optional), the logger tool (optional), and the Zimbra proxy (optional) on one server.

The menu driven installation displays the components and their existing default values. You can modify the information during the installation process. The table below describes the menu options.

Main Menu Options

Main Menu Description
Common Configuration - These are common settings for all servers
Hostname The host name configured in the operating system installation
LDAP master host The LDAP host name. On a single server installation, this name is the same as the hostname.
LDAP port The default port is 389
LDAP Admin password This is the master LDAP password.
Secure interprocess communications The default is YES. Secure interprocess communications requires that connections between the mail store, and other processes that use Java, use secure communications. It also specifies whether secure communications should be used between the master LDAP server and the replica LDAP servers for replication.
Time Zone Select the time zone to apply to the default COS. The time zone that should be entered is the time zone that the majority of users in the COS will be located in. The default time zone is PST (Pacific Time).
IP Mode IPv4 or IPv6.
Status The default is Enabled. For replica LDAP servers, the status can be changed to Disabled if the database is manually loaded after installation completes.
Create Domain You can create one domain during installation. Additional domains can be created from the administration console.
Domain to create The default domain is the fully qualified hostname of the server. If you created a valid mail domain on your DNS server, enter it now. In most cases, you will accept the default.
LDAP Root password The root LDAP password for internal LDAP operations.
LDAP Replication password This is the password used by the LDAP replication user to identify itself to the LDAP master and must be the same as the password on the LDAP master server.
LDAP Postfix password This is the password used by the postfix user to identify itself to the LDAP server and must be configured on the MTA server to be the same as the password on the LDAP master server.
LDAP Amavis password This is the password used by the amavis user to identify itself to the LDAP server and must be configured on the MTA server to be the same as the password on the LDAP server.
zimbra-logger When installed, it is automatically enabled. Logs from the hosts are sent to the mailbox server where zimbra- logger is installed and the information is used to generate the statistics graphs and for message tracing.
  • MTA Auth host — This is configured automatically if the MTA authentication server host is on the same server, but must be configured if the authentication server is not on the MTA.
  • Enable Spamassassin — Default is enabled.
  • Enable ClamAV — Default is enabled.
  • Notification address for AV alerts — Sets the notification address for AV alerts. You can either accept the default or create a new address. If you create a new address, remember to provision this address from the admin console. Note:If the virus notification address does not exist and your host name is the same as the domain name on the Zimbra server, the virus notifications queue in the Zimbra MTA server cannot be delivered.
  • Bind password for Postfix LDAP user- Automatically set.This is the password used by the postfix user to identify itself to the LDAP server and must be configured on the MTA server to be the same as the password on the LDAP master server.
  • Bind password for Amavis LDAP user- Automatically set. This is the password used by the amavis user to identify itself to the LDAP server and must be configured on the MTA server to be the same as the password on the LDAP server.
  • Master DNS IP address(es)
  • Enable DNS lookups over TCP
  • Enable DNS lookups over UDP
  • Only allow TCP to communicate with Master DNS
  • Enable SNMP notifications — The default is Yes.
  • SNMP Trap hostname
  • Enable SMTP notification — The default is Yes.
  • SMTP Source email address
  • SMTP Destination email address
Create Admin User The administrator account is created during installation. This account is the first account provisioned on the Zimbra server and allows you to log on to the administration console.
Admin user to create The user name assigned to the administrator account. Once the administrator account has been created, it is suggested that you do not rename the account as automatic Zimbra Collaboration notifications might not be received.
Admin Password You must set the admin account password. The password is case sensitive and must be a minimum of six characters. The administrator name, mail address, and password are required to log in to the administration console.
Anti-virus quarantine user A virus quarantine account is automatically created during installation. When AmivisD identifies an email message with a virus, the email is automatically sent to this mailbox. The virus quarantine mailbox is configured to delete messages older than 7 days.
Enable automated spam training By default, the automated spam training filter is enabled and two mail accounts are created.
  1. Spam Training User to receive mail notification about mail that was not marked as junk, but should have been.
  2. Non-spam (HAM) Training User to receive mail notification about mail that was marked as junk, but should not have been.

These addresses are automatically configured to work with the spam training filter. The accounts created have a randomly selected name. To recognize what the account is used for, you may want to change this name.

The default port configurations are shown
  • SMTP host
  • Web server HTTP port: 80
  • Web server HTTPS port: 443
  • Web server mode — Can be HTTP, HTTPS, Mixed, Both or Redirect.
    • Mixed mode uses HTTPS for logging in and HTTP for normal session traffic
    • Both mode means that an HTTP session stays HTTP, including during the login phase, and an HTTPS session remains HTTPS throughout, including the login phase.
    • Redirect mode redirects any users connecting via HTTP to an HTTPS connection.
    • All modes use SSL encryption for back-end administrative traffic.
  • IMAP server port: 143
  • IMAP server SSL port: 993
  • POP server port: 110
  • POP server SSL port: 995
  • Use spell checker server, default Yes (if installed)
  • Spell server URL: http://<example.com>:7780/aspell.php
  • Configure for use with mail proxy. FALSE
  • Configure for use with web proxy. FALSE
    If either or both of these are changed to TRUE, the proxy setting on the mailbox store are enabled in preparation for setting up zimbra proxy.
  • Enable version update checks. Zimbra Collaboration automatically checks to see if a new Zimbra Collaboration update is available. The default is TRUE.
  • Enable version update notifications. This enables automatic notification when updates are available when this is set to TRUE.
  • Version update notification email. This is the email address of the account to be notified when updates are available. The default is to send the notification to the admin’s account.
  • Version update source email. This is the email address of the account that sends the email notification. The default is the admin’s account.

Note: The software update information can be viewed from the Administration Console Tools Overview pane.

zimbra-spell (optional) When installed, it is automatically enabled.
Default Class of Service Configuration This menu section lists major new features for the Zimbra Collaboration release and whether the feature is enabled or not. When you change the feature setting during Zimbra Collaboration installation, you change the default COS settings Having this control, lets you decide when to introduce new features to your users.
c) Collapse menu Allows you to expand or collapse the menu.
r) Start servers after configuration When the installation and configuration is complete, if this is set to Yes, the Zimbra server is automatically started.
s) Save config to file At any time during the installation, you can save the configuration to file.
x) Expand menu Expand menus to see the underlying options
q) Quit Quit can be used at any time to quit the installation.

Installing Zimbra Collaboration Software

Important: Before you begin, make sure to:

  • (Network Edition Only) Store your license in a directory folder on your server as it is needed to complete your installation of Zimbra Collaboration.
  • Confirm you have the latest system requirements and prerequisites for installing Zimbra Collaboration.

Open an SSH session to the Zimbra server and follow the steps below:

1. Log in as root to the Zimbra server and cd to the directory where the Zimbra Collaboration archive tar file is saved (cd /var/<tmp>). Type the following commands:

  • Unpack the file: tar xzvf [zcsfullfilename.tgz]
  • Change to the correct directory: cd [zcsfullfilename]
  • Begin the installation: ./install.sh

The install.sh script reviews the installation software to verify that the Zimbra packages are available.

[root@zqa-222 opt]# tar xvzf zcs-NETWORK-8.7.0_GA_1659.RHEL6_64.20160628192634.t                                                                                                                                                             gz
zcs-NETWORK-8.7.0_GA_1659.RHEL6_64.20160628192634/packages/zimbra-apache-8.7.0_G                                                                                                                                                             A_1659.RHEL6_64-20160628192634.x86_64.rpm
zcs-NETWORK-8.7.0_GA_1659.RHEL6_64.20160628192634/packages/zimbra-archiving-8.7.                                                                                                                                                             0_GA_1659.RHEL6_64-20160628192634.x86_64.rpm
zcs-NETWORK-8.7.0_GA_1659.RHEL6_64.20160628192634/packages/zimbra-convertd-8.7.0                                                                                                                                                             _GA_1659.RHEL6_64-20160628192634.x86_64.rpm
zcs-NETWORK-8.7.0_GA_1659.RHEL6_64.20160628192634/packages/zimbra-core-8.7.0_GA_                                                                                                                                                             1659.RHEL6_64-20160628192634.x86_64.rpm
zcs-NETWORK-8.7.0_GA_1659.RHEL6_64.20160628192634/docs/en_US/User Instructions Connector for Outlook.pdf
zcs-NETWORK-8.7.0_GA_1659.RHEL6_64.20160628192634/docs/en_US/User Instructions for ZCS Import Wizard.pdf
zcs-NETWORK-8.7.0_GA_1659.RHEL6_64.20160628192634/docs/en_US/ZCS Connector for Blackberry.pdf
zcs-NETWORK-8.7.0_GA_1659.RHEL6_64.20160628192634/docs/en_US/ZCS Connector for Outlook.pdf
zcs-NETWORK-8.7.0_GA_1659.RHEL6_64.20160628192634/docs/en_US/Zimbra iCalendar Migration Guide.pdf

2. The installation process checks to see if Sendmail, Postfix, and MySQL software are running. If any of these applications are running, you are asked to disable them. Disabling MySQL is optional but highly recommended. Sendmail and Postfix must be disabled for the Zimbra Collaboration to start correctly.

[root@zqa-222 zcs-NETWORK-8.7.0_GA_1659.RHEL6_64.20160628192634]# ./install.sh

Operations logged to /tmp/install.log.FRNg7wVu
Checking for existing installation...
    zimbra-ldap...NOT FOUND
    zimbra-logger...NOT FOUND
    zimbra-mta...NOT FOUND
    zimbra-dnscache...NOT FOUND
    zimbra-snmp...NOT FOUND
    zimbra-store...NOT FOUND
    zimbra-apache...NOT FOUND
    zimbra-spell...NOT FOUND
    zimbra-convertd...NOT FOUND
    zimbra-memcached...NOT FOUND
    zimbra-proxy...NOT FOUND
    zimbra-archiving...NOT FOUND
    zimbra-core...NOT FOUND

3. The Zimbra software agreement displays. Read the agreement and when Do you agree with the terms of the software license agreement? [N] displays, enter Y to continue. Important: The license agreement displays in multiple sections, and you must accept each section of the license agreement.

4. Select Zimbra's packaging server is displayed, press enter to continue. Your system will be configured to add the Zimbra packaging repository for yum or apt-get as appropriate so it can install the Zimbra 3rd party packages.

Checking for installable packages

Found zimbra-core
Found zimbra-ldap
Found zimbra-logger
Found zimbra-mta
Found zimbra-dnscache
Found zimbra-snmp
Found zimbra-store
Found zimbra-apache
Found zimbra-spell
Found zimbra-convertd
Found zimbra-memcached
Found zimbra-proxy
Found zimbra-archiving

Use Zimbra's package repository [Y] y

Use internal development repo [N] y
Configuring package repository

Select the packages to install

Install zimbra-ldap [Y] y

Install zimbra-logger [Y] y

Install zimbra-mta [Y] y

Install zimbra-dnscache [Y] y

Install zimbra-snmp [Y] y

Install zimbra-store [Y] y

Checking required space for zimbra-core
Checking space for zimbra-store
Checking required packages for zimbra-store
     MISSING: libreoffice
     MISSING: libreoffice-headless


One or more suggested packages for zimbra-store are missing.
Some features may be disabled due to the missing package(s).


The system will be modified.  Continue? [N] y

Also select the services to be installed on this server. To install Zimbra Collaboration on a single server, enter Y for the ldap, logger, mta, snmp, store, and spell packages. If you use IMAP/POP Proxy, enter Y for the Zimbra proxy package.

Note: For the cross mailbox search feature, install the Zimbra Archive package. To use the archiving and discovery feature, contact Zimbra sales.

The installer verifies that there is enough room to install Zimbra.

5. Next, type Y and press Enter to modify the system.

  • Selected packages are installed on the server.
  • Checks to see if MX record is configured in DNS. The installer checks to see if the hostname is resolvable via DNS. If there is an error, the installer asks if you would like to change the hostname. We recommend that the domain name have an MX record configured in DNS.
  • Checks for port conflict.
Installing packages

Local packages  zimbra-core zimbra-ldap zimbra-logger zimbra-mta zimbra-dnscache zimbra-snmp zimbra-store zimbra-apache zimbra-spell zimbra-convertd zimbra-proxy selected for installation
Monitor /tmp/install.log.ykeq0Bw8 for package installation progress
Remote package installation started
Installing zimbra-core-components  zimbra-ldap-components zimbra-mta-components zimbra-dnscache-components zimbra-snmp-components zimbra-store-components zimbra-apache-components zimbra-spell-components zimbra-memcached zimbra-proxy-components....done
Local package installation started
Installing  zimbra-core zimbra-ldap zimbra-logger zimbra-mta zimbra-dnscache zimbra-snmp zimbra-store zimbra-apache zimbra-spell zimbra-convertd zimbra-proxy...done
Operations logged to /tmp/zmsetup.20160711-234517.log
Installing LDAP configuration database...done.
Setting defaults...

DNS ERROR resolving MX for zqa-221.eng.zimbra.com
It is suggested that the domain name have an MX record configured in DNS
Change domain name? [Yes] no
Checking for port conflicts

6. At this point, the Main menu displays showing the default entries for the Zimbra component you are installing. To expand the menu to see the configuration values, type X and press Enter. The Main menu expands to display configuration details for the package being installed. Values that require further configuration are marked with asterisks (****) to their left. To navigate the Main menu, select the menu item to change. You can modify any of the defaults. For a quick installation, accepting all the defaults, you only need to do the following:

7. If your time zone is not Pacific time, enter 1 to select Main menu 1, Common Configuration and then enter 6 for TimeZone. Set the correct time zone.

Main menu

   1) Common Configuration:
   2) zimbra-ldap:                             Enabled
   3) zimbra-logger:                           Enabled
   4) zimbra-mta:                              Enabled
   5) zimbra-dnscache:                         Enabled
   6) zimbra-snmp:                             Enabled
   7) zimbra-store:                            Enabled
        +Create Admin User:                    yes
        +Admin user to create:                 admin@zqa-221.eng.zimbra.com
******* +Admin Password                        UNSET
        +Anti-virus quarantine user:           virus-quarantine.ws91yggvp@zqa-221.eng.zimbra.com
        +Enable automated spam training:       yes
        +Spam training user:                   spam.seewcbk6@zqa-221.eng.zimbra.com
        +Non-spam(Ham) training user:          ham.h8qmkwft@zqa-221.eng.zimbra.com
        +SMTP host:                            zqa-221.eng.zimbra.com
        +Web server HTTP port:                 8080
        +Web server HTTPS port:                8443
        +Web server mode:                      https
        +IMAP server port:                     7143
        +IMAP server SSL port:                 7993
        +POP server port:                      7110
        +POP server SSL port:                  7995
        +Use spell check server:               yes
        +Spell server URL:                     http://zqa-221.eng.zimbra.com:7780/aspell.php
        +Enable version update checks:         TRUE
        +Enable version update notifications:  TRUE
        +Version update notification email:    admin@zqa-221.eng.zimbra.com
        +Version update source email:          admin@zqa-221.eng.zimbra.com
        +Install mailstore (service webapp):   yes
        +Install UI (zimbra,zimbraAdmin webapps): yes
******* +License filename:                     UNSET

   8) zimbra-spell:                            Enabled
   9) zimbra-convertd:                         Enabled
  10) zimbra-proxy:                            Enabled
  11) Default Class of Service Configuration:
  12) Enable default backup schedule:          yes
   s) Save config to file
   x) Expand menu
   q) Quit

Address unconfigured (**) items  (? - help)

8. Type r to return to the Main menu.

9. Enter 5 to select zimbra-dnscache from the Main menu.

  • Select 1 to disable.
  • Select 2 to configure the master DNS IP address(es).

10. Type r to return to the Main menu.

11. Enter 7 to select zimbra-store from the Main menu. The store configuration menu displays.

12. Select the following from the store configuration menu:

  • Type 4 to set the Admin Password. The password must be six or more

characters. Press Enter.

  • (Network Edition only) Type 25 for License filename and type the directory and file name for the

Zimbra license. For example, if you saved to the tmp directory, you would type /tmp/ZCSLicense.xml. If you do not have the license, you cannot proceed. See Zimbra License Requirements on page 10.

  • Enable version update checks and Enable version update notifications

are set to TRUE. Zimbra Collaboration automatically checks for the latest Zimbra Collaboration software updates and notifies the account that is configured in Version update notification email. You can modify this later from the administration console.

13. Type r to return to the Main menu.

14. If you want to change the default Class of Service settings for new features that are listed here, type 11 for Default Class of Service Configuration. Then type the number for the feature to be enabled or disabled. Changes you make here are reflected in the default COS configuration.

15. If no other defaults need to be changed, type a to apply the configuration changes. Press Enter

*** CONFIGURATION COMPLETE - press 'a' to apply
Select from menu, or press 'a' to apply config (? - help) a

16. When Save Configuration data to file appears, type Yes and press Enter.

Save configuration data to a file? [Yes]

17. The next request asks where to save the files. To accept the default, press Enter. To save the files to another directory, enter the directory and then press Enter

Save config in file: [/opt/zimbra/config.16039]
Saving config in /opt/zimbra/config.16039...done.

18. When The system will be modified - continue? appears, type Yes and press Enter.

The server is modified. Installing all the components and configuring the server can take several minutes. Components that are installed include spam training and documents, (wiki) accounts, time zone preferences, backup schedules, licenses, as well as common Zimlets.

The system will be modified - continue? [No] y
Operations logged to /tmp/zmsetup.20160711-234517.log
Setting local config values...done.
Initializing core config...Setting up CA...done.
Deploying CA to /opt/zimbra/conf/ca ...done.
Creating SSL zimbra-store certificate...done.
Creating new zimbra-ldap SSL certificate...done.
Creating new zimbra-mta SSL certificate...done.
Creating new zimbra-proxy SSL certificate...done.
Installing mailboxd SSL certificates...done.
Installing MTA SSL certificates...done.
Installing LDAP SSL certificate...done.
Installing Proxy SSL certificate...done.
Initializing ldap...done.
Checking current setting of zimbraReverseProxyAvailableLookupTargets
Querying LDAP for other mailstores
Searching LDAP for reverseProxyLookupTargets...done.
Adding zqa-221.eng.zimbra.com to zimbraReverseProxyAvailableLookupTargets
Setting convertd URL...done.
Granting group zimbraDomainAdmins@zqa-221.eng.zimbra.com domain right +domainAdminConsoleRights on zqa-221.eng.zimbra.com...done.
Granting group zimbraDomainAdmins@zqa-221.eng.zimbra.com global right +domainAdminZimletRights...done.
Setting up global distribution list admin UI components..done.
Granting group zimbraDLAdmins@zqa-221.eng.zimbra.com global right +adminConsoleDLRights...done.
Setting default backup schedule...Done
Looking for valid license to install...license installed.
Starting servers...done.
Installing common zimlets...
Finished installing common zimlets.
Installing network zimlets...
Finished installing network zimlets.
Restarting mailboxd...done.
Creating galsync account for default domain...done.
Setting up zimbra crontab...done.

Moving /tmp/zmsetup.20160711-234517.log to /opt/zimbra/log

Configuration complete - press return to exit

Final Set-Up

After the Zimbra servers are configured, the following functions must be configured.

Important: Zimbra Collaboration supports the default syslog of a supported operating system. Depending on your operating system, the steps contained in this section might not be correct. See your operating system documentation for specific information about how to enable syslog.

  • If logger is installed, set up the syslog configuration files to enable server statistics to display on the administration console, and enable the logger monitor host. The server statistics includes information about the message count, message volume, and anti-spam and anti-virus activity.
  • Zimbra Collaboration ships a default zimbra user with a disabled password. Zimbra Collaboration requires access to this account via ssh public key authentication. On most operating systems this combination is okay, but if you have modified pam rules to disallow any ssh access to disabled accounts then you must define a password for the zimbra UNIX account. This will allow ssh key authentication for checking remote queues. See the Zimbra wiki article, Mail Queue Monitoring.

Set up the ssh keys. To populate the ssh keys, as Zimbra user (su-zimbra). Type zmupdateauthkeys and press Enter. The key is updated on /opt/zimbra/.ssh/authorized_keys.

Enabling Server Statistics Display. In order for the server statistics to display on the administration console, the syslog configuration files must be modified.

1. As root, type /opt/zimbra/libexec/zmsyslogsetup. This enables the server to display statistics.

2. You must enable syslog to log statistics from remote machines.

  • Edit the /etc/sysconfig/syslog file, add -r to the SYSLOGD_OPTIONS

setting, SYSLOGD_options=”-r -m 0”

  • Stop the syslog daemon. Type /etc/init.d/syslog stop
  • Start the syslog daemon. Type /etc/init.d/syslog start

Note: On DEBIAN AND UBUNTU, step 2 is as follows

  • Edit the /etc/default/syslogd file, add -r to the SYSLOGD_OPTIONS

setting, SYSLOGD_options=”-r -m 0”

  • Stop the syslog daemon. Type /etc/init.d/sysklogd stop
  • Start the syslog daemon. Type /etc/init.d/sysklogd start

Optional Configurations

You can configure the following options:

Scanning Attachments in Outgoing Mail

You can enable real-time scanning of attachments in outgoing emails sent using the Zimbra Web Client. If enabled, when an attachment is added to an email, it is scanned using ClamAV prior to sending the message. If ClamAV detects a virus, it will block attaching the file to the message. By default, scanning is configured for a single node installation.

To enable using a single node:

zmprov mcf zimbraAttachmentsScanURL clam://localhost:3310/ zmprov mcf zimbraAttachmentsScanEnabled TRUE

Provisioning Accounts

Once the mailbox server is running, open your browser, enter the administration console URL and log on to the console to provision email accounts. The administration console URL is entered as:


Note: To go to the administration console, you must type https, even if you configured the Web server mode as HTTP.

The first time you log on, a warning may be displayed stating the connection is untrusted. This only applies the first time you log in. Click I understand the Risks to be able to connect to the Zimbra administration console. Then click OK.

Enter the admin user name and password configured during the installation process. Enter the name as admin@mailhost.example.com.

Activate the Zimbra Collaboration license (Network Edition Only)

After you log on, a dialog displays stating your license is not activated. Go to Global Settings>License and click Activate License on the toolbar. Click OK to continue.

Provision accounts

You can configure one account at a time with the New Account Wizard or you can create many accounts at once using the Account Migration Wizard.

Configuring One Account

The administration console New Account wizard steps you through the account information to be completed.

1. From the administration console Home page’s Content pane, go to Add Accounts. Note: Four accounts are listed: admin account, two spam training accounts, and a global Documents account. These accounts do not need any additional configuration.

2. Click Add Account. The first page of the New Account wizard opens.

3. Enter the account name to be used as the email address and the last name. This the only required information to create an account.

4. You can click Finish at this point, and the account is configured with the default COS and global features.

To configure aliases, forwarding addresses, and specific features for this account, proceed through the dialog before you click Finish. When the accounts are provisioned, you can send and receive emails.

Importing Content from User Mailboxes

Zimbra developed different applications to facilitate moving a user’s email messages, calendars, and contacts from their old email servers to their accounts on the Zimbra server. When the user’s files are imported, the folder hierarchy is maintained. Use one of the Zimbra Collaboration utilities to move user mail to Zimbra Collaboration to guarantee that all information is imported correctly.

The following applications can be accessed from the administration console Download page, and instruction guides are available from the Help Desk page or from the Zimbra Website, Documentation page.

Alternatively, you can download the following applications from http://{example.com/downloads}/index.html (with “example” being your Zimbra server name).

  • Zimbra Collaboration Migration Wizard for Exchange. Format is an .exe file. You can migrate users from Microsoft® Exchange server email accounts to Zimbra server accounts.
  • Zimbra Collaboration Migration Wizard for Domino. Format is an .exe file. You can migrate users from Lotus Domino server email accounts to Zimbra server accounts.
  • PST Import Wizard (User Instructions). Format is an .exe file. Users download the Import Wizard to their computers and run the executable file to import their Outlook .pst files to the Zimbra server. Before users run this utility, Zimbra recommends that they run the Outlook Inbox Repair tool, scanpst.exe, on their .pst files, to clean up any errors in their file. For more information about this tool, go to http://support.microsoft.com/kb/287497.

Administrators Account

Initial administrative tasks when you log on for the first time may include setting up the admin mailbox to include features, aliases, and forwarding addresses needed for the administrator’s working environment.

Two aliases for the admin account are created during install:

  • Postmaster. The postmaster address is displayed in emails that are automatically generated from Postfix when messages cannot be sent. If users reply to this address, the message is forwarded to the admin mailbox.
  • Root. This address is where notification messages from the operating system are sent.

If you entered a notification address for AV alerts when you configured the MTA, that is different from the default, you need to create that account in the administration console. If you didn’t change the default during installation, the anti-virus notification is sent directly to the admin account.

Uninstalling Zimbra Collaboration

To uninstall servers, run the install script -u, delete the Zimbra Collaboration directory, and remove the zcs.tgz file on the servers.

1. cd to the original install directory for the Zimbra Collaboration files.

2. Type ./install.sh -u

3. When Completely remove existing installation? is displayed, type Yes The Zimbra servers are stopped, the existing packages, the webapp directories, and the /opt/zimbra directory are removed.

4. Type rm -rf [zcsfullfilename] to delete the Zimbra Collaboration directory.

5. Delete the zcs.tgz file.

Jump to: navigation, search