How do I know which front door service has the issue?

Ka 5

Hi I received an email from Azure -- "The Azure Front Door service was unable to automatically rotate one or more of your certificates due to invalid DNS records. Customers are recommended to take action to update their certificates."

And it suggests "Recommended Actions

Confirm that the correct DNS CNAME is pointing to your Azure Front Door custom domain or that the required DNS TXT record exists."

There are many frontdoor resources under the subscription, how can I check which one is not set up properly?

ChaitanyaNaykodi-MSFT 23,341 Reputation points Microsoft Employee

2023-12-22T05:33:19.6033333+00:00

@Ka

Thank you for reaching out.

You can use this AFD Custom Domains - Get and check the "domainValidationState" in the response. As the certificate was not rotated automatically the value of "domainValidationState" should be "Pending revalidation". The different domain validation states are listed here.

Hope this helps! Please let me know if the issue persists. Thank you!
Ka 5 Reputation points

2024-01-01T10:49:26.6866667+00:00
Hi @ChaitanyaNaykodi-MSFT , thanks for your answer. But I got following errors

{ "error": { "code": "BadRequest", "message": "Property 'AfdDomainEntityKey.AfdDomainName' cannot be set to 'MY CUSTOM DOMAIN HERE'. " } }

this seems an issue
https://github.com/Azure/azure-rest-api-specs/issues/21779

However, this api still returned 404 after I changed the "." to "--".
Maybe this api doesn't work with front door (classic)
ChaitanyaNaykodi-MSFT 23,341 Reputation points Microsoft Employee

2024-01-04T03:33:06.9633333+00:00

@Ka

Thank you for getting back.

Yes, the REST API Call above is for AFD Standard/Premium SKU and will not work on AFD Classic SKU.

The Classic sku does not provide domain validation states like "Pending revalidation" so the method I mentioned above will only work for AFD Standard/Premium SKU.

I could not find similar solution for Classic AFD and I think it will be helpful if you could create a support request for this issue. If you have a support plan you may file a support ticket, else could you please send an email to azcommunity@microsoft.com with the below details.

Subject : Attn Chaitanya

Thread URL: Link to this thread.

Subscription ID

Please let me know once you have done the same.

Share via

How do I know which front door service has the issue?