http://wiki.zimbra.com/wiki/Recreating_a_Self-Signed_SSL_Certificate_in_ZCS_4.5_%26_5.0 All commands as root except where specified. /opt/zimbra/bin/keytool -delete -alias my_ca -keystore /opt/zimbra/java/jre/lib/security/cacerts -storepass changeit /opt/zimbra/jdk1.5.0_15/bin/keytool -delete -alias my_ca -keystore /opt/zimbra/java/jre/lib/security/cacerts -storepass changeit /opt/zimbra/jdk1.5.0_15/bin/keytool -delete -alias jetty -keystore /opt/zimbra/mailboxd/etc/keystore -storepass changeit zmlocalconfig -s -m nokey mailboxd_keystore_password # as zimbra user /opt/zimbra/jdk1.5.0_15/bin/keytool -delete -alias jetty -keystore /opt/zimbra/mailboxd/etc/keystore -storepass password_from_last_command /opt/zimbra/bin/zmcertmgr createca -new /opt/zimbra/bin/zmcertmgr deployca -localonly /opt/zimbra/bin/zmcertmgr createcrt self -new /opt/zimbra/bin/zmcertmgr verifycrt self /opt/zimbra/bin/zmcertmgr deploycrt self zmprov -l gcf zimbraCertAuthorityKeySelfSigned # as zimbra ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.naming.CommunicationException -n:389) zmprov -l gcf zimbraCertAuthorityCertSelfSigned # as zimbra ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.naming.CommunicationException -n:389)