Install Zimbra 8.8 on CentOS 8 - Step by Step

If you are on a budget and you need an email system that doesn't require licensing and run on a modest hardware, Zimbra is a good choice.

1. Install CentOS 8 as it is now supported as of sept 2020

Start off with a minimal installation of CentOS 8.

Our configuration:

KVM virtual machine
2x CPU cores
8GB RAM
40GB disk space

First, install the basic packages on the CentOS box:

yum install -y vim tar perl nmap-ncat net-tools bind-utils epel-release
yum update -y

2. Add public DNS records

We add the following three records to the public DNS system: the A record for the mail.protectigate.com server, the MX record to point to our new A record. The SPF record allows all servers that are referred to by the MX records to send protectigate.com emails out publicly.

Install Zimbra 8.8 on CentOS 8 – Step by Step

3. Prepare for Zimbra

# Change hostname to mail.protectigate.com
hostname mail.protectigate.com

In /etc/hosts change the loopback IP to the actual IP address of the server for the custom domain. First of all, localhost needs to resolve to the loopback (127.0.0.1) address, to make sure mysql user access works as intended. Second of all, the Zimbra LDAP module needs the FQDN to be present in the hosts file with the actual server IP.

# Your system has configured 'manage_etc_hosts' as True.

# As a result, if you wish for changes to this file to persist

# then you will need to either

# a.) make changes to the master file in /etc/cloud/templates/hosts.redhat.tmpl

# b.) change or remove the value of 'manage_etc_hosts' in

# /etc/cloud/cloud.cfg or cloud-config from user-data

# The following lines are desirable for IPv4 capable hosts

135.181.90.121 mail.protectigate.com mail

127.0.0.1 localhost.localdomain localhost

127.0.0.1 localhost4.localdomain4 localhost4

# The following lines are desirable for IPv6 capable hosts

::1 mail.protectigate.com mail

::1 localhost.localdomain localhost

::1 localhost6.localdomain6 localhost6

4. Install Zimbra

Download the latest version of Zimbra Collaboration - Open Source Edition:

https://www.zimbra.com/try/zimbra-collaboration-open-source/
(at this point in time it's: https://files.zimbra.com/downloads/8.8.15_GA/zcs-8.8.15_GA_3953.RHEL8_64.20200629025823.tgz)

Copy over to /tmp from PC:

scp zcs-8.8.15_GA_3953.RHEL8_64.20200629025823.tgz root@mail.protectigate.com:/tmp/

On the CentOS/RHEL server:

# Change work dir to /tmp
cd /tmp

# Extract the Zimbra installer
tar -xvf zcs-8.8.15_GA_3953.RHEL8_64.20200629025823.tgz

# Change work dir to the Zimbra installer dir
cd zcs-8.8.15_GA_3953.RHEL8_64.20200629025823

# Run the installer
./install.sh

…

----------------------------------------------------------------------

PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING THE SOFTWARE.

SYNACOR, INC. ("SYNACOR") WILL ONLY LICENSE THIS SOFTWARE TO YOU IF YOU

FIRST ACCEPT THE TERMS OF THIS AGREEMENT. BY DOWNLOADING OR INSTALLING

THE SOFTWARE, OR USING THE PRODUCT, YOU ARE CONSENTING TO BE BOUND BY

THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS

AGREEMENT, THEN DO NOT DOWNLOAD, INSTALL OR USE THE PRODUCT.

License Terms for this Zimbra Collaboration Suite Software:

https://www.zimbra.com/license/zimbra-public-eula-2-6.html

----------------------------------------------------------------------

Do you agree with the terms of the software license agreement? [N] Y

…

Use Zimbra's package repository [Y] Y

…

Importing Zimbra GPG key

Configuring package repository

install.sh: line 214: checkPackages: command not found

Select the packages to install

Checking required space for zimbra-core

Installing:

zimbra-core

The system will be modified. Continue? [N] Y

…

Install zimbra-ldap [Y] Y

Install zimbra-logger [Y] Y

Install zimbra-mta [Y] Y

Install zimbra-dnscache [Y] Y

Install zimbra-snmp [Y] Y

Install zimbra-store [Y] Y

Install zimbra-apache [Y] Y

Install zimbra-spell [Y] Y

Install zimbra-memcached [Y] Y

Install zimbra-proxy [Y] Y

Install zimbra-drive [Y] Y

Install zimbra-imapd (BETA - for evaluation only) [N] N

Install zimbra-chat [Y] Y

Checking required space for zimbra-core

Checking space for zimbra-store

Checking required packages for zimbra-store

zimbra-store package check complete.

Installing:

zimbra-core

zimbra-ldap

zimbra-logger

zimbra-mta

zimbra-dnscache

zimbra-snmp

zimbra-store

zimbra-apache

zimbra-spell

zimbra-memcached

zimbra-proxy

zimbra-drive

zimbra-patch

zimbra-mta-patch

zimbra-proxy-patch

zimbra-chat

The system will be modified. Continue? [N] Y

Beginning Installation - see /tmp/install.log.Gio0gLJ0 for details...

zimbra-core-components will be downloaded and installed.

zimbra-common-core-jar will be installed.

zimbra-common-core-libs will be installed.

zimbra-common-mbox-conf will be installed.

zimbra-common-mbox-conf-attrs will be installed.

zimbra-common-mbox-conf-msgs will be installed.

zimbra-common-mbox-conf-rights will be installed.

zimbra-common-mbox-db will be installed.

zimbra-common-mbox-docs will be installed.

zimbra-common-mbox-native-lib will be installed.

zimbra-timezone-data will be installed.

zimbra-core will be installed.

zimbra-ldap-components will be downloaded and installed.

zimbra-ldap will be installed.

zimbra-logger will be installed.

zimbra-mta-components will be downloaded and installed.

zimbra-mta will be installed.

zimbra-dnscache-components will be downloaded and installed.

zimbra-dnscache will be installed.

zimbra-snmp-components will be downloaded and installed.

zimbra-snmp will be installed.

Last metadata expiration check: 0:00:25 ago on Wed 09 Sep 2020 06:27:37 PM CEST.

zimbra-jetty-distribution will be downloaded and installed.

zimbra-store-components will be downloaded and installed.

zimbra-mbox-admin-console-war will be installed.

zimbra-mbox-conf will be installed.

zimbra-mbox-war will be installed.

zimbra-mbox-service will be installed.

zimbra-mbox-store-libs will be installed.

zimbra-mbox-webclient-war will be installed.

zimbra-store will be installed.

zimbra-apache-components will be downloaded and installed.

zimbra-apache will be installed.

zimbra-spell-components will be downloaded and installed.

zimbra-spell will be installed.

Last metadata expiration check: 0:00:29 ago on Wed 09 Sep 2020 06:27:37 PM CEST.

zimbra-memcached will be downloaded and installed.

zimbra-proxy-components will be downloaded and installed.

zimbra-proxy will be installed.

Last metadata expiration check: 0:00:32 ago on Wed 09 Sep 2020 06:27:37 PM CEST.

zimbra-drive will be downloaded and installed (later).

Last metadata expiration check: 0:00:33 ago on Wed 09 Sep 2020 06:27:37 PM CEST.

zimbra-patch will be downloaded and installed (later).

Last metadata expiration check: 0:00:34 ago on Wed 09 Sep 2020 06:27:37 PM CEST.

zimbra-mta-patch will be downloaded and installed (later).

Last metadata expiration check: 0:00:35 ago on Wed 09 Sep 2020 06:27:37 PM CEST.

zimbra-proxy-patch will be downloaded and installed (later).

Last metadata expiration check: 0:00:36 ago on Wed 09 Sep 2020 06:27:37 PM CEST.

zimbra-chat will be downloaded and installed (later).

Downloading packages (11):

zimbra-core-components

zimbra-ldap-components

zimbra-mta-components

zimbra-dnscache-components

zimbra-snmp-components

zimbra-jetty-distribution

zimbra-store-components

zimbra-apache-components

zimbra-spell-components

zimbra-memcached

zimbra-proxy-components

...done

Removing /opt/zimbra

Removing zimbra crontab entry...done.

Cleaning up zimbra init scripts...done.

Cleaning up /etc/security/limits.conf...done.

Finished removing Zimbra Collaboration Server.

Installing repo packages (11):

zimbra-core-components

zimbra-ldap-components

zimbra-mta-components

zimbra-dnscache-components

zimbra-snmp-components

zimbra-jetty-distribution

zimbra-store-components

zimbra-apache-components

zimbra-spell-components

zimbra-memcached

zimbra-proxy-components

...done

Installing local packages (26):

zimbra-common-core-jar

zimbra-common-core-libs

zimbra-common-mbox-conf

zimbra-common-mbox-conf-attrs

zimbra-common-mbox-conf-msgs

zimbra-common-mbox-conf-rights

zimbra-common-mbox-db

zimbra-common-mbox-docs

zimbra-common-mbox-native-lib

zimbra-timezone-data

zimbra-core

zimbra-ldap

zimbra-logger

zimbra-mta

zimbra-dnscache

zimbra-snmp

zimbra-mbox-admin-console-war

zimbra-mbox-conf

zimbra-mbox-war

zimbra-mbox-service

zimbra-mbox-store-libs

zimbra-mbox-webclient-war

zimbra-store

zimbra-apache

zimbra-spell

zimbra-proxy

...done

Installing extra packages (5):

zimbra-drive

zimbra-patch

zimbra-mta-patch

zimbra-proxy-patch

zimbra-chat

...done

Running Post Installation Configuration:

Operations logged to /tmp/zmsetup.20200909-183005.log

Installing LDAP configuration database...done.

Setting defaults...

DNS ERROR resolving MX for mail.protectigate.com

It is suggested that the domain name have an MX record configured in DNS

Change domain name? [Yes] Y

Create domain: [mail.protectigate.com] protectigate.com

MX: mail.protectigate.com (135.181.90.121)

MX: protectigate-com.mail.protection.outlook.com (104.47.21.36)

MX: protectigate-com.mail.protection.outlook.com (104.47.20.36)

Interface: 127.0.0.1

Interface: ::1

Interface: 135.181.90.121

Interface: 2a01:4f9:c010:c9cc::1

done.

Checking for port conflicts

Main menu

1) Common Configuration:

2) zimbra-ldap: Enabled

3) zimbra-logger: Enabled

4) zimbra-mta: Enabled

5) zimbra-dnscache: Enabled

6) zimbra-snmp: Enabled

7) zimbra-store: Enabled

+Create Admin User: yes

+Admin user to create: admin@protectigate.com

******* +Admin Password UNSET

+Anti-virus quarantine user: virus-quarantine.xhjrixtfsl@protectigate.com

+Enable automated spam training: yes

+Spam training user: spam.rlj4jfl8el@protectigate.com

+Non-spam(Ham) training user: ham.jcobzk87@protectigate.com

+SMTP host: mail.protectigate.com

+Web server HTTP port: 8080

+Web server HTTPS port: 8443

+Web server mode: https

+IMAP server port: 7143

+IMAP server SSL port: 7993

+POP server port: 7110

+POP server SSL port: 7995

+Use spell check server: yes

+Spell server URL: http://mail.protectigate.com:7780/aspell.php

+Enable version update checks: TRUE

+Enable version update notifications: TRUE

+Version update notification email: admin@protectigate.com

+Version update source email: admin@protectigate.com

+Install mailstore (service webapp): yes

+Install UI (zimbra,zimbraAdmin webapps): yes

8) zimbra-spell: Enabled

9) zimbra-proxy: Enabled

10) Default Class of Service Configuration:

s) Save config to file
x) Expand menu
q) Quit

Address unconfigured (**) items (? - help) 7

Store configuration

1) Status: Enabled

2) Create Admin User: yes

3) Admin user to create: admin@protectigate.com

** 4) Admin Password UNSET

5) Anti-virus quarantine user: virus-quarantine.xhjrixtfsl@protectigate.com

6) Enable automated spam training: yes

7) Spam training user: spam.rlj4jfl8el@protectigate.com

8) Non-spam(Ham) training user: ham.jcobzk87@protectigate.com

9) SMTP host: mail.protectigate.com

10) Web server HTTP port: 8080

11) Web server HTTPS port: 8443

12) Web server mode: https

13) IMAP server port: 7143

14) IMAP server SSL port: 7993

15) POP server port: 7110

16) POP server SSL port: 7995

17) Use spell check server: yes

18) Spell server URL: http://mail.protectigate.com:7780/aspell.php

19) Enable version update checks: TRUE

20) Enable version update notifications: TRUE

21) Version update notification email: admin@protectigate.com

22) Version update source email: admin@protectigate.com

23) Install mailstore (service webapp): yes

24) Install UI (zimbra,zimbraAdmin webapps): yes

Select, or 'r' for previous menu [r] 4

Password for admin@protectigate.com (min 6 characters): [k7pi1iTD] Sup3rSecret!

Store configuration

1) Status: Enabled

2) Create Admin User: yes

3) Admin user to create: admin@protectigate.com

4) Admin Password set

5) Anti-virus quarantine user: virus-quarantine.xhjrixtfsl@protectigate.com

6) Enable automated spam training: yes

7) Spam training user: spam.rlj4jfl8el@protectigate.com

8) Non-spam(Ham) training user: ham.jcobzk87@protectigate.com

9) SMTP host: mail.protectigate.com

10) Web server HTTP port: 8080

11) Web server HTTPS port: 8443

12) Web server mode: https

13) IMAP server port: 7143

14) IMAP server SSL port: 7993

15) POP server port: 7110

16) POP server SSL port: 7995

17) Use spell check server: yes

18) Spell server URL: http://mail.protectigate.com:7780/aspell.php

19) Enable version update checks: TRUE

20) Enable version update notifications: TRUE

21) Version update notification email: admin@protectigate.com

22) Version update source email: admin@protectigate.com

23) Install mailstore (service webapp): yes

24) Install UI (zimbra,zimbraAdmin webapps): yes

Select, or 'r' for previous menu [r] r

Main menu

1) Common Configuration:

2) zimbra-ldap: Enabled

3) zimbra-logger: Enabled

4) zimbra-mta: Enabled

5) zimbra-dnscache: Enabled

6) zimbra-snmp: Enabled

7) zimbra-store: Enabled

8) zimbra-spell: Enabled

9) zimbra-proxy: Enabled

10) Default Class of Service Configuration:

s) Save config to file
x) Expand menu
q) Quit

*** CONFIGURATION COMPLETE - press 'a' to apply

Select from menu, or press 'a' to apply config (? - help) a

Save configuration data to a file? [Yes]

Save config in file: [/opt/zimbra/config.25561]

Saving config in /opt/zimbra/config.25561...done.

The system will be modified - continue? [No] Y

Operations logged to /tmp/zmsetup.20200909-185418.log

Setting local config values...done.

Initializing core config...Setting up CA...done.

Deploying CA to /opt/zimbra/conf/ca ...done.

Creating SSL zimbra-store certificate...done.

Creating new zimbra-ldap SSL certificate...done.

Creating new zimbra-mta SSL certificate...done.

Creating new zimbra-proxy SSL certificate...done.

Installing mailboxd SSL certificates...done.

Installing MTA SSL certificates...done.

Installing LDAP SSL certificate...done.

Installing Proxy SSL certificate...done.

Initializing ldap...done.

Setting replication password...done.

Setting Postfix password...done.

Setting amavis password...done.

Setting nginx password...done.

Setting BES searcher password...done.

Creating server entry for mail.protectigate.com...done.

Setting Zimbra IP Mode...done.

Saving CA in ldap...done.

Saving SSL Certificate in ldap...done.

Setting spell check URL...done.

Setting service ports on mail.protectigate.com...done.

Setting zimbraFeatureTasksEnabled=TRUE...done.

Setting zimbraFeatureBriefcasesEnabled=TRUE...done.

Checking current setting of zimbraReverseProxyAvailableLookupTargets

Querying LDAP for other mailstores

Searching LDAP for reverseProxyLookupTargets...done.

Adding mail.protectigate.com to zimbraReverseProxyAvailableLookupTargets

Setting Master DNS IP address(es)...done.

Setting DNS cache tcp lookup preference...done.

Setting DNS cache udp lookup preference...done.

Setting DNS tcp upstream preference...done.

Updating zimbraLDAPSchemaVersion to version '1571057268'

Setting TimeZone Preference...done.

Disabling strict server name enforcement on mail.protectigate.com...done.

Initializing mta config...done.

Setting services on mail.protectigate.com...done.

Adding mail.protectigate.com to zimbraMailHostPool in default COS...done.

Creating domain protectigate.com...done.

Setting default domain name...done.

Creating domain protectigate.com...already exists.

Creating admin account admin@protectigate.com...done.

Creating root alias...done.

Creating postmaster alias...done.

Creating user spam.pzqxyog8@protectigate.com...done.

Creating user ham.bhnftixqf@protectigate.com...done.

Creating user virus-quarantine._6zshrqb@protectigate.com...done.

Setting spam training and Anti-virus quarantine accounts...done.

Initializing store sql database...done.

Setting zimbraSmtpHostname for mail.protectigate.com...done.

Configuring SNMP...done.

Setting up syslog.conf...done.

Starting servers...done.

Installing common zimlets...

com_zimbra_attachmail...done.

com_zimbra_email...done.

com_zextras_chat_open...done.

com_zimbra_attachcontacts...done.

com_zimbra_srchhighlighter...done.

com_zimbra_bulkprovision...done.

com_zimbra_clientuploader...done.

com_zimbra_tooltip...done.

com_zimbra_proxy_config...done.

com_zimbra_date...done.

com_zimbra_ymemoticons...done.

com_zimbra_adminversioncheck...done.

com_zimbra_phone...done.

com_zextras_drive_open...done.

com_zimbra_webex...done.

com_zimbra_viewmail...done.

com_zimbra_mailarchive...done.

com_zimbra_cert_manager...done.

com_zimbra_url...done.

Finished installing common zimlets.

Restarting mailboxd...done.

Creating galsync account for default domain...done.

You have the option of notifying Zimbra of your installation.

This helps us to track the uptake of the Zimbra Collaboration Server.

The only information that will be transmitted is:

The VERSION of zcs installed (8.8.15_GA_3953_RHEL8_64)

The ADMIN EMAIL ADDRESS created (admin@protectigate.com)

Notify Zimbra of your installation? [Yes] N

Notification skipped

Checking if the NG started running...done.

Setting up zimbra crontab...done.

Moving /tmp/zmsetup.20200909-185418.log to /opt/zimbra/log

Configuration complete - press return to exit

4. Accessing the management console

The webui management console is listening on port 7071/tcp and uses the https protocol. We can access it with username 'admin' and the password we specified earlier. In our case it is 'Sup3rSecret!'

https://mail.protectigate.com:7071/

5. Accessing the User WebUI

Regular users access the console on the traditional HTTPS port:

https://mail.protectigate.com

6. TROUBLESHOOTING

At any point you need to restart the installation process you can remove the broken installation with the following command:
./install.sh --uninstall

If the zmconfigd service doesn't appear to be running, make sure nc is installed on the RHEL box.
yum install -y nmap-ncat

If the antivirus service refuses to start check the system memory, you need at least 8GB RAM allocated to the server!

To Refresh Server Status in the WebUI run the following command as the 'zimbra' user:
zmsoap -z GetServiceStatusRequest

7. Deploy auto-renewing public SSL for Zimbra

Article Here

8. Set up DKIM for Zimbra

Article is coming on 19/sept/2020 (this Saturday)

1. Install CentOS 8 as it is now supported as of sept 2020

2. Add public DNS records

3. Prepare for Zimbra

4. Install Zimbra

4. Accessing the management console

5. Accessing the User WebUI

6. TROUBLESHOOTING

7. Deploy auto-renewing public SSL for Zimbra

8. Set up DKIM for Zimbra

Reader Interactions

Comments Cancel reply