Regenerate Self-Signed SSL Certificate - Single-Server

1. Begin by generating a new Certificate Authority (CA).

This step is optional and not required everytime you renew the self signed certificate.

/opt/zimbra/bin/zmcertmgr createca -new
/opt/zimbra/bin/zmcertmgr deployca

2. Then generate a certificate signed by the CA that expires in 365 days with either wildcard or subject altnames.

/opt/zimbra/bin/zmcertmgr createcrt -new -days 365

3. Next, deploy the certificate.

/opt/zimbra/bin/zmcertmgr deploycrt self 

4. To finish, verify the certificate was deployed.

/opt/zimbra/bin/zmcertmgr viewdeployedcrt

5. Restart zmcontrol to take the changes in effect.
zmcontrol restart