zmcontrol restart sccfd zmacmedomain list 7. Common Issues & Fixes Issue 1: sccfd not running after upgrade Fix: Re-enable Let's Encrypt integration:
su - zimbra zmprov modifyServer `zmhostname` -zimbraSSLUseLetSCrypt TRUE zmcontrol stop sccfd zmcontrol disable sccfd # on systemd: systemctl disable zimbra-sccfd To re-enable later: zimbra sccfd
/opt/zimbra/libexec/acme-client -d yourdomain.com -v Cause: Too frequent checks or large cert chain. Fix: Increase ssl_sccfd_check_interval to 172800 (2 days). Issue 4: Certificate renewed but not deployed Fix: Manually reload proxy: zmcontrol restart sccfd zmacmedomain list 7
su - zimbra zmcertmgr viewdeployedcrt # Check current expiry zmcertmgr renewcrt # Force renewal if within threshold Or restart sccfd – it will check on startup: zimbra sccfd
zmproxyctl reload zmmailboxdctl restart # if single-server If you manage certificates manually or via another CA: