Custom domain for azure frontdoor is stuck on pending

Question

Trying to set up a custom domain on Azure Front Door, but it's been stuck in "Pending" for almost a week now.

Steps taken so far:

• Regenerated the TXT validation record a few times
• Added the updated TXT record to the domain’s DNS (confirmed it's showing up correctly)
• Tried again on different days, just in case it was a timing issue

For context, I’m using:

Domain type: Non-Azure validated domain

DNS management: All other DNS services

Certificate type: AFD managed

Despite all that, the status hasn't changed and there's no clear indication of what's going wrong.

Not sure what might be missing here, but it’s been blocking progress for a while now.

Answer 1

Hello Kent Gentilezo

We kindly request you to review the following details regarding the Azure Front Door (AFD) issue:

Validate the domain correctly. Since you have already regenerated the TXT record.

• Check the DNS Propagation: Ensure that the TXT record is correctly propagated.
• Make sure the TXT record is updated in the correct format, such as _dnsauth
• You can verify this by using the following link: https://www.digwebinterface.com/. This may help resolve the issue. Typically, validation occurs within a few minutes, though it can sometimes take up to 24 hours.
• After adding the TXT record, please return to the Azure Front Door portal. It will automatically check the DNS records and validate the custom domain. Once the validation is complete, the status should change from "Pending" to "Validated."

Please check below document for your reference: https://learn.microsoft.com/en-us/azure/frontdoor/domain#txt-record-validation

Certificate Provisioning:

• Since you’re using an AFD-managed certificate, the validation process includes both DNS ownership verification and certificate provisioning. If the certificate issuance (via DigiCert, Azure’s partner) is delayed, it can keep the domain in "Pending."
• Action: In the Azure portal, check the certificate status under the Front Door’s custom domain settings. If it’s stuck, try disabling and re-enabling the custom domain, then regenerate the TXT record.

Additionally, you can try deleting the domain from Front Door and re-adding it with a freshly generated TXT record. It sometimes resets the process properly. Based on your domain we have suggested to use Custom domain instead of default domain.

Shared the steps using below document.

Refer https://learn.microsoft.com/en-us/azure/frontdoor/standard-premium/how-to-add-custom-domain

---

Please consider accepting the answer to help increase visibility of this question for other members of the Microsoft Q&A community. If not, please let us know what is still needed in the comments so the question can be answered. Thank you for helping to improve Microsoft Q&A!

---