Deploying a multi-domain SSL certificate or wildcard SSL certificate on Zimbra involves several steps, including uploading the SSL files, verifying them, and deploying them correctly. Below is a step-by-step guide:

---

Step 1: Obtain Your SSL Files

• Retrieve your SSL certificate files (e.g., server_domain_com.crt), CA bundle file (e.g., server_domain_com.ca-bundle), and private key (e.g., commercial.key) from your Certificate Authority (CA).

---

Step 2: Transfer SSL Files to Your Hosting Server

• Copy the SSL files to a temporary directory on your hosting server. For example:

  /opt/server_domain_com.crt
  /opt/server_domain_com.ca-bundle
  /opt/commercial.key
  

---

Step 3: Set Private Key Permissions

• Ensure the private key file has the correct permissions:

  chmod 640 /opt/zimbra/ssl/zimbra/commercial/commercial.key
  

---

Step 4: Verify SSL Files

• Use the zmcertmgr tool to verify that your certificate and CA bundle match the private key:

  /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/server_domain_com.crt /opt/server_domain_com.ca-bundle
  

• The output should confirm the verification.

---

Step 5: Deploy SSL Certificate

• Use zmcertmgr to deploy your multi-domain or wildcard SSL certificate:

  /opt/zimbra/bin/zmcertmgr deploycrt comm /opt/server_domain_com.crt /opt/server_domain_com.ca-bundle
  

• The output should indicate successful deployment.

---

Step 6: Check Deployment

• Verify that the correct SSL certificate is deployed using:

  /opt/zimbra/bin/zmcertmgr viewdeployedcrt comm
  

• Ensure your multi-domain or wildcard certificate is listed.

---

Step 7: Restart Zimbra Services

• Restart Zimbra services for the new SSL settings to take effect:

  sudo su -zimbra
  zmcontrol restart
  

---

Notes:

• Ensure that the domain names in your SSL certificate match the domains you are securing.
• Verify that your hosting server's DNS settings point correctly to the right IP addresses.

---