Convert from a custom certificate to a default certificate (LA)

Follow these steps if you need to update your property from using a custom certificate to using a default certificate (secure by default), instead.

  1. In the Property Manager Editor, in the Property Hostnames panel, select the hostname and click Edit.

  2. Switch Automatically request certificates to On.

  3. Select the Deployment network. You can choose Standard TLS, or for more security, Enhanced TLS.

  4. Click Validate Certificate Domains to verify that you own the domain of the hostname you are converting. The list displays the ACME CNAME record that you need to add to your DNS as proof that you own the domain.

  5. Click the copy icon in the row containing the hostname, and copy the CNAME DNS record to your DNS.

  6. Click Next.

  7. If applicable, specify the desired Mapping Solution, then click Next.


You can only select one Mapping Solution—you can enable Edge IP Binding, or select a Use Case, but not both.

  1. Click Submit.

  2. Read the instructions in the Success message, and click Close when you are done.

Next steps

This process applies to an existing property that you edit to make this change. To apply it, you also need to perform the following steps:


You have three days

The old certificate will stop working in three days. Make sure that you complete these steps within those three days.

  1. Activate your updated property on the staging network.

  2. Test it thoroughly.

  3. Activate the property on the production network to go live with the changes.

  4. You'll need to add new CNAME records for the edge hostnames to your DNS, if any of these apply:

    • If your custom certificate is a VIP certificate, update the CNAME record. You can't use the existing CNAME.

    • If you changed the network between Standard TLS and Enhanced TLS, add the new CNAME records for these edge hostnames to your DNS.