--- title: "DNS validation" slug: "certificatemanager-domainvalid-dns" updated: 2026-10-08T06:57:09Z published: 2026-10-08T06:57:09Z canonical: "guide.ncloud-docs.com/certificatemanager-domainvalid-dns" --- > ## Documentation Index > Fetch the complete documentation index at: https://guide.ncloud-docs.com/llms.txt > Use this file to discover all available pages before exploring further. # DNS validation Available in Classic and VPC To complete certificate issuance, perform domain control validation (DCV) for all domains in your request. ## DNS validation prerequisites To perform DNS validation when validating domain ownership, you need permission to change the CNAME and TXT records in the domain's DNS. - Certificate Manager does not support changes to DNS records. Check with your domain name registrar, agency, or your own DNS management system to see how to make changes in advance. - For domains registered with [Global DNS](https://www.ncloud.com/product/networking/globalDns) on NAVER Cloud Platform, you can change records using Global DNS. Caution When you change the DNS name server (NS), the cache is automatically updated. It may take several hours to up to 2 days before you can properly view the record registered on the new name server. Note that certificate issuance may be delayed right after you change the name server. ## CNAME record registration method You can use this DNS validation method when issuing Cloud Basic certificates. If you select DNS validation when **[applying for a certificate](/docs/en/certificatemanager-issuecertificate#%EC%9D%B8%EC%A6%9D%EC%84%9C%EB%B0%9C%EA%B8%89%EC%8B%A0%EC%B2%AD)**, validation values for the CNAME record name and record value of each domain are generated after you complete the request. To validate DNS: 1. Go to **Cloud Certificate** > **Certificate List** > **Certificate details** to check the DNS validation value for your domain. It appears in the following format: | Record Name | Record Type | Record Value | | --- | --- | --- | | _*65d7d22ee3a541c385bbfa0a2d950641*.mydomain1.example.com. | CNAME | _*e8335a33e5974d6995846142d659f583*.cm.naverncp.com. | - **Record Name**: The validation value to enter as the DNS record name. - **Record Type**: Set the record type to **CNAME** in the DNS management system. - **Record Value**: The validation value to enter as the DNS record value. 2. Enter the DNS validation value through your domain's DNS management system. Wildcard (*) domains have a validation value created in the corresponding locations. - Domains that successfully complete DNS validation will have their validation status change from **In progress** to **Succeeded**. Note The certificate is issued after all domains included in the certificate have been successfully validated. Go to **Cloud Certificate** > **Certificate List** > **Certificate details** to check the validation status of your domains. ## DNS TXT record registration method This DNS validation method is used for Advanced DV/OV certificates. When you select DNS validation as the validation method when [applying for a certificate](/docs/en/certificatemanager-issuecertificate#%EC%9D%B8%EC%A6%9D%EC%84%9C%EB%B0%9C%EA%B8%89%EC%8B%A0%EC%B2%AD), it creates a TXT record name and record value to be entered in the DNS settings for each domain after the application is complete. There are 2 main DNS validation methods. ### Persistent DNS TXT This is a convenient method where, once set up initially, you can perform continuous validation without changing the records. The Record Value includes account information that identifies the issuing CA and the user. You can also map organization information (Organization) to prevent certificates for the domain from being issued with unintended organization information. 1. Go to **Enterprise Certificate** > **Domains** or **Enterprise Certificate** > **Order List** > **Order** > **Certificate list** > **Certificate details** to check the DNS validation value for your domain. It appears in the following format: | Record Name | Record Type | Record Value | | --- | --- | --- | | _validation-persist.example.com. | TXT | navercloudtrust.com; accounturi=https://navercloudtrust.com/account/LiaJjang | - **Record Name**: The validation value to enter as the DNS record name. - **Record Type**: Set the record type to **TXT** in the DNS management system. - **Record Value**: The validation value to enter as the DNS record value. 2. Enter the validation value you checked in your domain's DNS management system. The validation value for wildcard (*) domains is also created in the same location. - Domains that successfully complete DNS validation will have their status change from **In progress** to **Succeeded**. 3. Domain validation is valid for up to 9 days. Certificate Manager revalidates the domain every 9 days, and if the record value remains valid, the validity period is automatically extended by 9 days each time. 4. When the domain is validated, you can use that information to issue certificates for the domain and even subdomains (including wildcards). If you need to issue certificates for multiple subdomains, it is more efficient to complete the validation at the parent domain level. Note The certificate is issued only after all domains included in the certificate have been successfully validated. Go to **Enterprise Certificate** > **Domains** or **Enterprise Certificate** > **Order List** > **Order** > **Certificate list** > **Certificate details** to check the validation status of your domains. ### DNS TXT (token method) 1. Go to **Enterprise Certificate** > **Order List** > **Order** > **Certificate list** > **Certificate details** to check the DNS validation value for your domain. It appears in the following format: | Record Name | Record Type | Record Value | | --- | --- | --- | | _dnsvalidation.mydomain1.example.com. | TXT | _0f05a65612ad22ebb963410806a3925409ebd3323bbaf73b72b9e7cf8dd239d9 | - **Record Name**: The validation value to enter as the DNS record name. - **Record Type**: Set the record type to **TXT** in the DNS management system. - **Record Value**: The validation value to enter as the DNS record value. 2. Enter the validation value you checked in your domain's DNS management system. The validation value for wildcard (*) domains is also created in the same location. - Domains that successfully complete DNS validation will have their status change from **In progress** to **Succeeded**. 3. Domain validation is valid for up to 199 days. After this period, you can no longer reuse the existing validation information. 4. When the domain is validated, you can use that information to issue certificates for the domain and even subdomains (including wildcards). If you need to issue certificates for multiple subdomains, it is more efficient to complete the validation at the parent domain level. Note The certificate is issued only after all domains included in the certificate have been successfully validated. Go to **Enterprise Certificate** > **Domains** or **Enterprise Certificate** > **Order List** > **Order** > **Certificate list** > **Certificate details** to check the validation status of your domains.