Search code examples
azuresslazure-web-app-serviceazure-traffic-managercustom-domain

Failed to create Free App Service Managed Cert


Free managed app service cert creation/generation failing with below CNAME error:

Error:Failed to create App Service Managed Certificate for hostname Subdomain.rootdomain.com. Click here for more details. Error Details: Properties.CanonicalName is invalid. Current CNAME records of the hostname are Subdomain.someotherdomain.com,subdomain.trafficmanager.net,subdomain.azurewebsites.net

I was able to repro and make it work if my CName mapping is via subdomain to my default *.azurewebsites.net.

However, the issue seems to be appearing when my CName points to another subdomain before the default *.azurewebsites.net as seen in error message below:

enter image description here

Any insights on this issue is appreciated?


Solution

  • You are seeing this behavior as it’s not a supported feature in Azure App Services yet. While generating managed free certificated azure will run certain checks on domain and looks for a valid CName ie, either pointed to “.azurewebsites.net” or “.trafficmanager.net” In order to solve this problem please follow below steps in order:

    • Remove Cname Subdomain.someotherdomain.com (sub.devopsauthor.com), make sure there is only one Cname which is pointed to either “.azurewebsites.net” or “.trafficmanager.net”

    • Now attempt to generate the Certificate and bind it to domain.

    • If you still want the Subdomain.someotherdomain.com after cert generation, you can readd the Cname.