How to add cname record into a subdomain at DNS zone in Azure

Varun Deepak Jagadeesh (Nallas) 0 Reputation points
2024-05-27T08:15:35.3333333+00:00

Hi Team,

We are encountering an issue in our domain for creating a auto validating certificate. The main issue revolves around the auto-validation of certificates.

Here’s a detailed overview of the problem:

  1. Current Setup:
    • consider our domain, **xyz.com**, registered with GoDaddy.
    • We have a frontend named **myfe.xyz.com**.
    • A DNS Zone is created, and the NS record is updated in GoDaddy to route traffic from Azure to GoDaddy.
  2. Problem:
    • We have NS records for our subdomain in both GoDaddy and Azure.
    • Due to this setup, we can't create a CName record on both ends unless we map the CName to the Front Door endpoint.
    • Without this CName mapping, the certificate does not auto-renew.
  3. Comparison with AWS:
    • AWS provides an option to choose between auto-renewal and manual renewal while creating a certificate. However, this option seems to be missing in Azure, or I might be missing the correct steps to achieve this.

Request for Assistance:

Can anyone advise on how we can set up the auto-renewal of certificates in Azure given our current setup? Specifically, we need guidance on the correct process for creating and managing certificates with auto-renewal in Azure, considering the limitations we are facing with CName records and NS records.

Azure DNS
Azure DNS
An Azure service that enables hosting Domain Name System (DNS) domains in Azure.
619 questions
Azure Front Door
Azure Front Door
An Azure service that provides a cloud content delivery network with threat protection.
613 questions
{count} votes

1 answer

Sort by: Most helpful
  1. GitaraniSharma-MSFT 48,511 Reputation points Microsoft Employee
    2024-05-27T09:29:21.41+00:00

    Hello @Varun Deepak Jagadeesh (Nallas) ,

    Welcome to Microsoft Q&A Platform. Thank you for reaching out & hope you are doing well.

    As per Azure Front Door document,

    Azure Front Door (Standard and Premium) managed certificates are automatically rotated if the domain CNAME record points directly to a Front Door endpoint or points indirectly to a Traffic Manager endpoint. Otherwise, you need to re-validate the domain ownership to rotate the certificates.

    Have you delegated your domain to Azure as mentioned in the below tutorials?

    Refer: https://learn.microsoft.com/en-us/azure/frontdoor/standard-premium/how-to-add-custom-domain#prerequisites

    https://learn.microsoft.com/en-us/azure/dns/dns-delegate-domain-azure-dns

    Could you also confirm if you are trying to create a CNAME for a subdomain or an apex/root domain?

    Apex domains are at the root of a DNS zone and don't contain subdomains. For example, contoso.com is an apex domain. Azure Front Door supports adding apex domains when you use Azure DNS.

    Refer: https://learn.microsoft.com/en-us/azure/frontdoor/front-door-how-to-onboard-apex-domain?pivots=front-door-standard-premium

    Regards,

    Gita

    1 person found this answer helpful.