Hi everyone, I just upgraded my Zimbra Collaboration Suite on a single server. I am using Ubuntu Server with approximately 50 mailboxes, as well as services such as Mailbox, LDAP, MTA, Proxy, and Let’s Encrypt SSL. The upgrade was completed without errors, and all services are now running. Before using it fully in production, I want to be sure my setup is correct. What should I check after an upgrade? Are there important settings to review for mail flow, SSL, performance, or backups?
Geometry Dash
What should I check after upgrading Zimbra ZCS?
-
jamieoliver
- Posts: 3
- Joined: Thu Mar 13, 2025 10:05 am
-
Martinwiertz
- Advanced member
- Posts: 120
- Joined: Sat Sep 13, 2014 3:55 am
- Location: The Netherlands
- ZCS/ZD Version: V10.1 FOSS Intalio on Ubuntu22.04
Re: What should I check after upgrading Zimbra ZCS?
Possibility
#
Zimbra Mail Server – Post-Upgrade Checklist
**Server:** ___________________________
**Previous Version:** __________________
**Upgraded Version:** _________________
**Upgrade Date:** _____________________
**Performed By:** _____________________
---
## 1. Verify Zimbra Services
```bash
su - zimbra
zmcontrol status
```
☐ All services show **Running**
☐ No failed or stopped services
☐ `systemctl status zimbra` shows active
If needed:
```bash
zmcontrol restart
```
---
## 2. Confirm Installed Version
```bash
zmcontrol -v
```
☐ Version matches expected upgrade version
☐ Patch level verified
---
## 3. Review Log Files for Errors
Check the following logs:
* `/opt/zimbra/log/mailbox.log`
* `/opt/zimbra/log/zmmailboxd.out`
* `/var/log/zimbra.log`
* `/opt/zimbra/log/nginx.log`
* `/opt/zimbra/log/audit.log`
Example check:
```bash
grep -iE "error|exception|failed" /opt/zimbra/log/mailbox.log
```
☐ No critical errors
☐ No repeated exceptions
☐ No service startup failures
---
## 4. Web Client & Admin Console Test
☐ HTTPS access working
☐ SSL certificate valid and trusted
☐ User login successful
☐ Admin console accessible (port 7071)
☐ Mail send/receive via webmail
☐ Attachments upload/download works
☐ Calendar accessible
☐ Contacts accessible
☐ No browser console errors
---
## 5. Mail Flow Verification
### Internal Mail Flow
☐ Send email between internal accounts
☐ Message delivered without delay
### External Mail Flow
☐ Send mail to external provider (Gmail/Outlook)
☐ Receive mail from external provider
Check mail queue:
```bash
mailq
```
☐ Queue empty or minimal
☐ No deferred messages
---
## 6. SSL Certificate Validation
```bash
zmcertmgr viewdeployedcrt
```
☐ Certificate not expired
☐ Full chain installed
☐ Correct hostname
☐ Tested externally (SSL Labs or similar)
---
## 7. LDAP & Authentication
☐ Internal authentication works
☐ External LDAP/AD authentication works (if configured)
☐ SSO works (if configured)
Test authentication:
```bash
zmprov auth user@domain.com password
```
---
## 8. Database & Storage Health
☐ MariaDB/MySQL running
☐ No database errors
☐ Disk space sufficient
Check:
```bash
df -h
free -m
```
☐ No partition above 85% usage
☐ Adequate free RAM
---
## 9. Backup System Verification
☐ Last backup completed successfully
☐ Incremental backups working
☐ Backup logs clean
☐ Test restore confirmed (recommended)
Check:
```bash
zmbackupquery
```
---
## 10. Security & Mail Protection
☐ Amavis running
☐ ClamAV running
☐ SpamAssassin running
☐ DKIM enabled
☐ SPF record verified
☐ DMARC record verified
---
## 11. Mobile & Client Access
☐ IMAP (143/993) working
☐ SMTP Submission (587/465) working
☐ ActiveSync working
☐ Outlook connector working (if used)
---
## 12. Firewall & Network Ports
Verify external access:
☐ Port 25 (SMTP)
☐ Port 443 (HTTPS)
☐ Port 993 (IMAPS)
☐ Port 587 (Submission)
☐ Port 7071 (Admin – restricted access)
---
## 13. Performance Check
Monitor for at least 15–30 minutes after upgrade:
☐ CPU load normal
☐ Memory usage stable
☐ No excessive swap usage
☐ No abnormal disk I/O
---
#
Final Validation
☐ Monitoring system updated
☐ No user complaints
☐ Upgrade documented
☐ Snapshot/rollback plan reviewed
☐ System declared operational
---
**Final Status:**
☐ Upgrade Successful
☐ Issues Detected (Document Below)
#
Zimbra Mail Server – Post-Upgrade Checklist**Server:** ___________________________
**Previous Version:** __________________
**Upgraded Version:** _________________
**Upgrade Date:** _____________________
**Performed By:** _____________________
---
## 1. Verify Zimbra Services
```bash
su - zimbra
zmcontrol status
```
☐ All services show **Running**
☐ No failed or stopped services
☐ `systemctl status zimbra` shows active
If needed:
```bash
zmcontrol restart
```
---
## 2. Confirm Installed Version
```bash
zmcontrol -v
```
☐ Version matches expected upgrade version
☐ Patch level verified
---
## 3. Review Log Files for Errors
Check the following logs:
* `/opt/zimbra/log/mailbox.log`
* `/opt/zimbra/log/zmmailboxd.out`
* `/var/log/zimbra.log`
* `/opt/zimbra/log/nginx.log`
* `/opt/zimbra/log/audit.log`
Example check:
```bash
grep -iE "error|exception|failed" /opt/zimbra/log/mailbox.log
```
☐ No critical errors
☐ No repeated exceptions
☐ No service startup failures
---
## 4. Web Client & Admin Console Test
☐ HTTPS access working
☐ SSL certificate valid and trusted
☐ User login successful
☐ Admin console accessible (port 7071)
☐ Mail send/receive via webmail
☐ Attachments upload/download works
☐ Calendar accessible
☐ Contacts accessible
☐ No browser console errors
---
## 5. Mail Flow Verification
### Internal Mail Flow
☐ Send email between internal accounts
☐ Message delivered without delay
### External Mail Flow
☐ Send mail to external provider (Gmail/Outlook)
☐ Receive mail from external provider
Check mail queue:
```bash
mailq
```
☐ Queue empty or minimal
☐ No deferred messages
---
## 6. SSL Certificate Validation
```bash
zmcertmgr viewdeployedcrt
```
☐ Certificate not expired
☐ Full chain installed
☐ Correct hostname
☐ Tested externally (SSL Labs or similar)
---
## 7. LDAP & Authentication
☐ Internal authentication works
☐ External LDAP/AD authentication works (if configured)
☐ SSO works (if configured)
Test authentication:
```bash
zmprov auth user@domain.com password
```
---
## 8. Database & Storage Health
☐ MariaDB/MySQL running
☐ No database errors
☐ Disk space sufficient
Check:
```bash
df -h
free -m
```
☐ No partition above 85% usage
☐ Adequate free RAM
---
## 9. Backup System Verification
☐ Last backup completed successfully
☐ Incremental backups working
☐ Backup logs clean
☐ Test restore confirmed (recommended)
Check:
```bash
zmbackupquery
```
---
## 10. Security & Mail Protection
☐ Amavis running
☐ ClamAV running
☐ SpamAssassin running
☐ DKIM enabled
☐ SPF record verified
☐ DMARC record verified
---
## 11. Mobile & Client Access
☐ IMAP (143/993) working
☐ SMTP Submission (587/465) working
☐ ActiveSync working
☐ Outlook connector working (if used)
---
## 12. Firewall & Network Ports
Verify external access:
☐ Port 25 (SMTP)
☐ Port 443 (HTTPS)
☐ Port 993 (IMAPS)
☐ Port 587 (Submission)
☐ Port 7071 (Admin – restricted access)
---
## 13. Performance Check
Monitor for at least 15–30 minutes after upgrade:
☐ CPU load normal
☐ Memory usage stable
☐ No excessive swap usage
☐ No abnormal disk I/O
---
#
Final Validation☐ Monitoring system updated
☐ No user complaints
☐ Upgrade documented
☐ Snapshot/rollback plan reviewed
☐ System declared operational
---
**Final Status:**
☐ Upgrade Successful
☐ Issues Detected (Document Below)