DNS validation

Available in Classic and VPC

To complete certificate issuance, perform domain control validation (DCV) for all domains in your request.

DNS validation prerequisites

To perform DNS validation when validating domain ownership, you need permission to change the CNAME and TXT records in the domain's DNS.

• Certificate Manager does not support changes to DNS records. Check with your domain name registrar, agency, or your own DNS management system to see how to make changes in advance.
• For domains registered with Global DNS on NAVER Cloud Platform, you can change records using Global DNS.

CNAME record registration method

You can use this DNS validation method when issuing Cloud Basic certificates.
If you select DNS validation when applying for a certificate, validation values for the CNAME record name and record value of each domain are generated after you complete the request.

To validate DNS:

1. Go to Cloud Certificate > Certificate List > Certificate details to check the DNS validation value for your domain. It appears in the following format:

   Record Name	Record Type	Record Value
   _65d7d22ee3a541c385bbfa0a2d950641.mydomain1.example.com.	CNAME	_e8335a33e5974d6995846142d659f583.cm.naverncp.com.

   • Record Name: The validation value to enter as the DNS record name.
   • Record Type: Set the record type to CNAME in the DNS management system.
   • Record Value: The validation value to enter as the DNS record value.
2. Enter the DNS validation value through your domain's DNS management system. Wildcard (*) domains have a validation value created in the corresponding locations.
   • Domains that successfully complete DNS validation will have their validation status change from In progress to Succeeded.

DNS TXT record registration method

This DNS validation method is used for Advanced DV/OV certificates. When you select DNS validation as the validation method when applying for a certificate, it creates a TXT record name and record value to be entered in the DNS settings for each domain after the application is complete.

There are 2 main DNS validation methods.

Persistent DNS TXT

This is a convenient method where, once set up initially, you can perform continuous validation without changing the records.
The Record Value includes account information that identifies the issuing CA and the user.
You can also map organization information (Organization) to prevent certificates for the domain from being issued with unintended organization information.

1. Go to Enterprise Certificate > Domains or Enterprise Certificate > Order List > Order > Certificate list > Certificate details to check the DNS validation value for your domain. It appears in the following format:

   Record Name	Record Type	Record Value
   _validation-persist.example.com.	TXT	navercloudtrust.com; accounturi=https://navercloudtrust.com/account/LiaJjang

   • Record Name: The validation value to enter as the DNS record name.
   • Record Type: Set the record type to TXT in the DNS management system.
   • Record Value: The validation value to enter as the DNS record value.
2. Enter the validation value you checked in your domain's DNS management system. The validation value for wildcard (*) domains is also created in the same location.
   • Domains that successfully complete DNS validation will have their status change from In progress to Succeeded.
3. Domain validation is valid for up to 9 days. Certificate Manager revalidates the domain every 9 days, and if the record value remains valid, the validity period is automatically extended by 9 days each time.
4. When the domain is validated, you can use that information to issue certificates for the domain and even subdomains (including wildcards). If you need to issue certificates for multiple subdomains, it is more efficient to complete the validation at the parent domain level.

DNS TXT (token method)

1. Go to Enterprise Certificate > Order List > Order > Certificate list > Certificate details to check the DNS validation value for your domain. It appears in the following format:

   Record Name	Record Type	Record Value
   _dnsvalidation.mydomain1.example.com.	TXT	_0f05a65612ad22ebb963410806a3925409ebd3323bbaf73b72b9e7cf8dd239d9

   • Record Name: The validation value to enter as the DNS record name.
   • Record Type: Set the record type to TXT in the DNS management system.
   • Record Value: The validation value to enter as the DNS record value.

2. Enter the validation value you checked in your domain's DNS management system. The validation value for wildcard (*) domains is also created in the same location.

   • Domains that successfully complete DNS validation will have their status change from In progress to Succeeded.

3. Domain validation is valid for up to 199 days. After this period, you can no longer reuse the existing validation information.

4. When the domain is validated, you can use that information to issue certificates for the domain and even subdomains (including wildcards). If you need to issue certificates for multiple subdomains, it is more efficient to complete the validation at the parent domain level.