Zimbra Sccfd Updated May 2026

zmcontrol restart sccfd zmacmedomain list 7. Common Issues & Fixes Issue 1: sccfd not running after upgrade Fix: Re-enable Let's Encrypt integration:

/opt/zimbra/libexec/acme-client -d yourdomain.com -v Cause: Too frequent checks or large cert chain. Fix: Increase ssl_sccfd_check_interval to 172800 (2 days). Issue 4: Certificate renewed but not deployed Fix: Manually reload proxy: zimbra sccfd

su - zimbra zmcontrol status | grep sccfd Expected output (if enabled): zmcontrol restart sccfd zmacmedomain list 7

su - zimbra zmcertmgr viewdeployedcrt # Check current expiry zmcertmgr renewcrt # Force renewal if within threshold Or restart sccfd – it will check on startup: Issue 4: Certificate renewed but not deployed Fix:

zmproxyctl reload zmmailboxdctl restart # if single-server If you manage certificates manually or via another CA:

zmcontrol stop sccfd zmcontrol start sccfd To trigger sccfd immediately (instead of waiting for next interval):

su - zimbra zmprov modifyServer `zmhostname` -zimbraSSLUseLetSCrypt TRUE zmcontrol stop sccfd zmcontrol disable sccfd # on systemd: systemctl disable zimbra-sccfd To re-enable later: