This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 62%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EKT%3C/text%3E%3C/svg%3E)
Dear Azure Support,
How to add cname record into a subdomain at DNS zone in Azure ?
Here is my issue
1) My client have a domain ("mydomain.com") registered at godaddy.com.
2) I want to deploy app0 under "app0.mydomain.com" subdomain.
3) So i created a public DNS zone for "app0.mydomain.com" at DNS zone in Azure.
4) i have added the 4 NS records from Azure DNS store into Godaddy apex ".mydomain.com".
everything was working fine. i was happy.
But when i want to enable https , i saw a big problem.
My backend is App Service (app0)
My Frontend is FrontDoor.
because FrontDoor is offering free ssl certificate.
but when i set the ssl at front door ,
it asking me to set "app0.azurefd.net" as CNAME record at "app0.mydomain.com"
So i went into DNS zone try to add CNAME record .
but i dont' know how ?
so i went into Godaddy panel , tried to add CNAME "app0.mydomain.com" point to "app0.azurefd.net".
but godaddy is not allowing.
now Azure also not allowing (may be i dont know)
godaddy also not llowing
how can i do that ?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(48, 36%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESM%3C/text%3E%3C/svg%3E)
@Kannusamy, Thaniyarasu Have you followed this document to create a cname for the sub-domain?
@Kannusamy, Thaniyarasu Any update?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(112.00000000000001, 83%, 20%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVD%3C/text%3E%3C/svg%3E)
We are encountering a similar issue in our domain as described by @Kannuswamy. The document provided by @SaiKishor-MSFT does not address our specific concern. The main issue revolves around the auto-validation of certificates.
Here’s a detailed overview of the problem:
**xyz.com**, registered with GoDaddy.**myfe.xyz.com**.Request for Assistance:
@SaiKishor-MSFT Can you advise on how we can set up auto-renewal of certificates in Azure given our current setup? Specifically, we need guidance on the correct process for creating and managing certificates with auto-renewal in Azure, considering the limitations we are facing with CName records and NS records.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(313.6, 40%, 40%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EDN%3C/text%3E%3C/svg%3E)
no matter what you do, it won't work unless you know enough to know why what they tell you to do is impossible, and won't work, and then you also know the work around.
They tell you to create a root level cname record for inclusion into the network. But you can't create a root level CNAME record, unless it is flattened by the DNS provider, like CloudFlare will do.
However, then it becomes an A record from the POV of the DNS servers out there, and is not a CNAME so your website name never resolves and therefore Front Door cannot possible see it. Any resolution for yourdomain.com will fail because there is no record of you, and so the DNS servers won't tell Front Door you exist. It also can't read it as an A record because then it still doesn't propagate, except under www.
So, once you realize that what they have said to do is impossible, then you have to figure out a work around.
Hi,
In your godaddy, just add CNAME to app0 then point it to app0.azurefd.net.
It is not allowing because, your Godaddy will append the domain to the value which you provide.
@msrini-MSFT We can't add a CName over there because we already have an NS record pointing to app0.azurefd.net, So if we try to create a CName it will show a conflict.
Also Godaddy REQUIRES that a CNAME have an IP Address, and there is no Front Door IP Address.