Adding Custom Domain to Azure Front Door Assistance

Question

Hi, currently I've added an Azure Front Door service to my storage account's static website. The static website is an interface for my API's system. I want to add a custom domain to my Azure Front Door system, however I'm a bit confused on the process. I have my own custom certificate to upload, however I thought it would be as simple as adding the certificate and passkey to Azure Front Door, similar to API Management. Do I need to create a key vault to store my certificate? Are there any steps I can follow to ensure I am adding my custom domain correctly? I find tutorials online however they are not for an entirely "custom" domain, as they have "azurefd" attached to the end of their URLs. Thank you in advance!

Answer 1

@hampton123 ,

Welcome to the Microsoft Q&A Platform. Thank you for reaching out & I hope you are doing well.

Please note that

1. Adding a custom domain
   and
2. enabling HTTPS (adding certificate) to the custom domain

are two different steps.

First, you have to make sure you add the custom domain.

Now for BYOC certificates,

• Make sure the Certificate requirements are met
• You are required to use Azure Key Vault to manage the certificate.
• See : Import a certificate in Azure Key Vault
• Also see : How to Use managed identities to access Azure Key Vault certificates

Kindly let us know if this helps or you need further assistance on this issue.

Thanks,

Kapil

---

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.

Answer 2

Hello hampton123,

Thanks for your question.

You are on the right track. While it involves a couple of steps, its feasible and I will just point out the steps and relevant links below for you:

• Since you plan on using your own certificate please remember to take a look at the certificate requirements here: https://learn.microsoft.com/en-us/azure/frontdoor/domain?pivot=front-door-standard-premium#certificate-requirements
• While Optional, Creating a Key Vault is the recommended approach for storing your custom certificate. It offers a secure and managed environment for certificates in Azure. https://learn.microsoft.com/en-us/azure/frontdoor/standard-premium/how-to-configure-https-custom-domain?tabs=powershell#use-your-own-certificate
• The "azurefd" in is part of the default hostname assigned to the Azure Front Door profile. With your custom domain name it will rout from there.
• To finally add the domain after taking a look at the above use these depending on your sku: https://learn.microsoft.com/en-us/azure/frontdoor/front-door-custom-domain https://learn.microsoft.com/en-us/azure/frontdoor/standard-premium/how-to-add-custom-domain

If the above information was useful, please remember to 'Accept Answer'

Regards,