Azure Email Communication service can not verify my custom domain

Question

I am trying to set up email communications service in Azure. To do that, I must input a TXT record in my dns so that Azure can verify I own the domain.

I purchased my domain from a third party and their DNS points to Azure servers.

DNS for my domain is provided by Azure. It has been working well for my web sites for several years.

This tool: https://mxtoolbox.com reports my DNS is healthy with the exception of mail records. However, the tool cannot find the TXT record I input for verification. Also, Azure Email Communication service can not verify the domain.

I found this issue with a similar question as mine:

https://learn.microsoft.com/en-us/answers/questions/1489220/cannot-see-my-domains-from-email-service-when-i-tr

The answer shows these three suggestions below. The first one I do not understand:

Ensure that the verified domain is not associated with the same subscription, resource group, or email service as your ACS

I only have one Azure subscription - How can the verified domain and the email service not be associated with the same subscription?

Ensure that the verified domain is not already connected to another ACS resource

DONE - I only have one ACS resource.

Please ensure that Data location for Communication Resource and Email Communication Resource that was selected during resource creation are the same

DONE - Both are "Global"

Other research I have done:

https://learn.microsoft.com/en-us/answers/questions/810312/unable-to-verify-custom-domain-in-azure-txt-record

https://learn.microsoft.com/en-us/azure/app-service/app-service-web-tutorial-custom-domain?tabs=root%2Cazurecli

https://learn.microsoft.com/en-us/azure/app-service/manage-custom-dns-migrate-domain#2-create-the-dns-records

https://answers.microsoft.com/en-us/msoffice/forum/all/txt-record-not-being-detected/70653013-3bb9-4a19-9ac1-3e492bd9f5a8

https://learn.microsoft.com/en-us/azure/communication-services/concepts/email/email-domain-configuration-troubleshooting?source=recommendations

https://learn.microsoft.com/en-us/answers/questions/74116/azure-custom-domain-not-verified-because-of-asuid

https://learn.microsoft.com/en-us/answers/questions/1725204/unable-to-verify-domain-for-email-txt-record-was-a

Answer 1

Based on the information provided and the steps you've already taken, here are some detailed steps to troubleshoot and resolve the TXT record verification issue with Azure Email Communications Service:

Step 1: Verify TXT Record Creation

1. Check DNS Zone in Azure:
   • Go to the Azure Portal.
   • Navigate to DNS Zones.
   • Select your domain's DNS zone.
   • Verify that the TXT record you created is present and correctly formatted.
2. Correct Format for TXT Record:
   • The TXT record should be in the format required by Azure. Typically, it looks something like this:

     
          Name: @ (or your domain name without the http:// or https://)
     
          Type: TXT
     
          Value: ms=<verification_code>
     
          TTL: 3600 (or default)
     
     

Step 2: Propagation Time

1. Wait for DNS Propagation:
   • DNS changes can take some time to propagate. Although many changes propagate within minutes, it can take up to 48 hours for changes to fully propagate.
   • Use tools like MXToolbox or DNSChecker to check the propagation status of your TXT record.

Step 3: Ensure No Conflicting Records

1. Check for Conflicting TXT Records:
   • Make sure there are no conflicting TXT records that might interfere with Azure's verification process.
   • Remove any old or duplicate TXT records that might be related to previous verification attempts.

Step 4: Verify Domain Settings in Azure

1. Ensure Correct Subscription and Resource Group:
   • While you mentioned you only have one subscription, ensure that the domain and the Email Communication Service (ACS) are indeed within the same subscription.
   • Verify that the domain is correctly associated with the resource group that contains your ACS.

Step 5: Troubleshoot Specific to Azure Email Communication Service

1. Recreate the TXT Record:
   • Sometimes, deleting and recreating the TXT record can resolve issues, especially if there were any typos or format errors initially.
   • Ensure you copy the exact verification value provided by Azure.

Step 6: Verify with Azure Support

1. Contact Azure Support:
   • If the above steps do not resolve the issue, consider reaching out to Azure Support for assistance.
   • Provide them with the details of your setup, the exact TXT record you created, and any error messages you're seeing.

By following these steps, you should be able to resolve the issue and successfully verify your domain for Azure Email Communication Service.