Failed to create Free App Service Managed Cert

Question

Free managed app service cert creation/generation failing with below CNAME error:

Error: Failed to create App Service Managed Certificate for hostname Subdomain.rootdomain.com. Click here for more details. Error Details: Properties.CanonicalName is invalid. Current CNAME records of the hostname are Subdomain.someotherdomain.com,subdomain.trafficmanager.net,subdomain.azurewebsites.net

I was able to repro and make it work if my CName mapping is via subdomain to my default *.azurewebsites.net.

However, the issue seems to be appearing when my CName points to another subdomain before the default *.azurewebsites.net as seen in error message below:

Any insights on this issue is appreciated?

Answer 1

Thanks for asking question! You are seeing this behavior as it’s not a supported feature in Azure App Services yet. While generating managed free certificated azure will run certain checks on domain and looks for a valid CName ie, either pointed to “.azurewebsites.net” or “.trafficmanager.net” In order to solve this problem please follow below steps in order:

Remove Cname Subdomain.someotherdomain.com (sub.devopsauthor.com), make sure there is only one Cname which is pointed to either “.azurewebsites.net” or “.trafficmanager.net”

Now attempt to generate the Certificate and bind it to domain.

If you still want the Subdomain.someotherdomain.com after cert generation, you can read the Cname.

Thank you to Naga sandeep for the assistance.