When we install zimbra mail server, then automatically performs zimbra generate Self-Signed Certificate for webmail clients, webmail console, smtp, pop and imap. Self-Signed Certificate valid for one year from installation zimbra mail server. If the expiry date Self-Signed Certificate is not renewed automatically zimbra mail server can not be used to send and receive e-mail because it is considered less safe by zimbra.
To check the validity period on a Self-Signed Certificate zimbra mail server, please do the following :
To install the Self-Signed Certificate on the mail server zimbra is already expired, please run the step-by-step below :
Before installing the Self-Signed Certificate is new, we should first backup the Self-Signed Certificate old with the command :
The next is to generate a new Certificate Authority (zmssl.cnf, ca.key, and ca.pem) :
Then we request the validity period of the Self-Signed Certificate for zimbra mail server, for example for 1 year (365 days) or 2 years (730 days) :
Then install deploycrt self & deploy ca :
Restart daemon zimbra mail server :
Finally It's finished installation Self-Signed Certificate on the mail server zimbra.