How To

How to Generate Certificate Signing Request on Zimbra

  1. Log in as root.
  2. Adjust the following command to match your information: /opt/zimbra/bin/zmcertmgr createcsr comm -new "/C=US/ST=NJ/L=Clifton/O=Company Inc/OU=Department/CN=your.domain.com" Where:

    C = 2-digit country code

    ST = State/Province

    L = City

    O = Organization Name

    OU = Department (e.g., IT Department)

    CN = Common Name (mail.domain.com, *.domain.com)

    If you want to include more than one name in the CSR, you can add -subjectAltNames to the end of the command. Example:

    /opt/zimbra/bin/zmcertmgr createcsr comm -new "/C=US/ST=NJ/L=Clifton/O=Company Inc/OU=Department/CN=your.domain.com" -subjectAltNames "www.domain.com, secure.domain.com"

  3. Running this command will output the CSR to the following location: /opt/zimbra/ssl/zimbra/xyz/xyz.csr
  4. You will use the CSR to place the order for the certificate (select "Other" as the server software when placing your order).