Validate a domain using DNS CNAME record
In this method, Akamai generates a CNAME record that you copy to your DNS to automatically handle domain validation challenges and certificate renewal. You can use the same CNAME value to validate a default certificate and to prove domain ownership to Akamai. The DNS CNAME method is recommended in most cases.
Use this method when:
- You have direct control over your DNS records.
- You want to validate an exact HOST, a WILDCARD, or a DOMAIN.
- You are using a Default DV certificate, which lets you use a DNS CNAME record for both the certificate and domain validation.
Don't use this method when:
- You don’t have control over your DNS records.
- You are using multiple CDNs.
- You are not using a Default DV certificate.
How to
To validate a domain using DNS CNAME record, first submit your domain for validation in Domain Ownership Manager and then update your DNS configuration.
1. Add a domain to Domain Ownership Manager
- From the Control Center menu, select Domain Ownership Manager.
- Click + Validate a domain.
- In the Validate domain window:
- Enter the domain name. You can enter more than one name to validate more domains.
- Domain names can contain letters (a-z), numbers (0-9), and hyphens (-).
- You can use hyphens, but not at the beginning or end of the domain name.
- Spaces or special characters aren't supported.
- The maximum length of each label is 63 characters, and a full domain name can have a maximum of 253 characters.
- Select one of the validation scopes:
- HOST. Use for exact domains. For example,
blog.example.com. - WILDCARD. Use for first-level subdomains. For example, when you enter
example.com,blog.example.comand123.example.comare validated, but notxyz.blog.example.comor top levelexample.com. - DOMAIN. Use for exact domains and all subdomains. For example, when you enter
example.com, thenblog.example.com,123.blog.example.com, andx.123.blog.example.comare validated.
- HOST. Use for exact domains. For example,
- Enter the domain name. You can enter more than one name to validate more domains.
- Click Submit.
You can see the newly added domain in the Pending tab. The initial status is Request accepted.
2. Update your DNS configuration
- View the domain details.
- In Domain validation details, navigate to the CNAME record tab and copy the challenge token values for Name and Target.
- In your DNS provider:
- Add a CNAME record:
\_acme-challenge.domainName. For a domain calledexample.com, the record should be\_acme-challenge.example.com. - Paste the value you copied from the Domain Ownership Manager's UI as the target.
- Add a CNAME record:
After you update your DNS or HTTP configuration, you can either wait for the next background job or start an instant validation. The validation process starts right away or after a short delay, depending on the number of requests in the queue.
Check the domain status to monitor the validation progress. After it completes, your domain status changes to Validated.
Updated 9 days ago
