You use the Certificate Installation Wizard to
Install self-signed certificate
Generate the Certificate Signing Request (CSR) that is sent to a commercial certificate authorizer
Install the commercially signed certificate when it has been authorized
To learn more about certificates, see Managing Certificates from the Administration Console.
When Zimbra Collaboration Serveris installed, the self-signed certificate is automatically installed and can be used for testing Zimbra Collaboration Server. You should generate the CSR and install the commercial certificate when Zimbra Collaboration Serveris used in your production environment.
When you are using a commercially signed certificate, the Certificate Install Wizard is run twice:
The first time to generate the CSR and download the file to send to a certificate authority (CA) who issues a signed certificate.
The second time to install the signed certificate that is returned from the CA.
To generate the CSR, you complete a form with details about the domain, company, and country, and then generate a CSR with the RSA private key. You save this file to your computer and submit it to your commercial certificate authorizer.
As you enter information about your company, before you generate the CSR you must know the following details:
Common Name ( CN). This is the exact domain name that should be used to access your Web site securely.
Are you going to use a wildcard common name? If you want to manage multiple sub domains on a single domain on the server with a single certificate, check this box. An asterisk (*) is added to the Common Name field.
Country Name (C) The country you want the certificate to display as your company location.
State/Province ( ST) The state/province you want the certificate to display as your company location.
City ( L) The city you want the certificate to display as your company location.
Organization Name (O). Your company name.
Organization Unit ( OU). The unit name (if applicable).
Are you going to use Subject Alternative Name (SAN)? The input should be a valid domain name. When SAN is used, the domain name is compared with the common name and then to the SAN to find a match. You can create multiple SANs. When the alternate name is entered here, the client ignores the common name and tries to match the server name to one of the SAN names.
Go to Configure > Certificates page and in the gear box select Install Certificate. A Certificate Installation Wizard opens.
Select the target server from the drop-down menu and click Next.
Select Generate the CSR for the commercial certificate authorizer. Click Next.
Enter the server information as described in How to generate a Certificate Signing Request.. Click Next. The CSR including the RSA Private Key is generated.
Click Download the CSR and save the file to your computer. Change the default name to your servername.csr.
After you save the . csr name, on the Certificate Installation Wizard dialog, click Finish.
Now you submit the .csr file to a commercial certificate authorizer. When they send the digitally signed certificate back, use the Certificates Wizard to install the certificate on the Zimbra Collaboration Server.
When the commercial certificate is received, save the signed certificate to a folder that you can access from the administration console. Then start the Certificate Installation Wizard.
Go to Configure > Certificates page and in the gear box select Install Certificate. A Certificate Installation Wizard opens.
Select the target server from the drop-down menu and click Next.
Select Install the commercially signed certificate. Click Next.
Verify that the information displayed is the correct information for the CSR. Click Next.
Click Browse to find the commercial certificate. Click Next.
The target server is listed. Click Install.
When the certificate is installed, you must restart the server to apply the certificate. Restart the service from the ZCS server command line. Enter zmcontrol restart.
-------------------------------------------------------------------------------------------------------
Copyright @ 2005-2017 Synacor, Inc. All rights reserved. "Zimbra" is a registered trademark of Synacor, Inc.