Question

Difficulty: MediumConfigure Azure App Services

You have an Azure App Service web app named App1. You need to configure a custom domain named www.contoso.com for App1 and secure it using a free Azure App Service Managed Certificate.

Which four actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

  1. 1Create a CNAME record with your DNS provider that maps www.contoso.com to app1.azurewebsites.net.
  2. 2Add the custom domain www.contoso.com to App1 in the Azure portal.
  3. 3Create an App Service Managed Certificate for www.contoso.com.
  4. 4Create an SNI SSL binding for www.contoso.com using the App Service Managed Certificate.

Answer

The correct sequence is: first, create a CNAME record with the DNS provider mapping the domain to the App Service; second, add the custom domain to the App Service web app; third, create the App Service Managed Certificate; and fourth, create the SNI SSL binding using the managed certificate.
To secure a custom domain using an App Service Managed Certificate, you must first create the CNAME record in DNS so Azure can validate ownership. Then, you add the custom domain to the App Service. Once the custom domain is successfully added, you generate the App Service Managed Certificate. Finally, you configure an SNI SSL binding to link the certificate to the custom domain.

Step-by-Step Solution

1
Create a CNAME record with your DNS provider that maps www.contoso.com to app1.azurewebsites.net.
The domain maps to the App Service, allowing Azure to validate ownership.
Azure validation requires a valid DNS record to prove ownership before the domain can be bound to the App Service.
2
Add the custom domain www.contoso.com to App1 in the Azure portal.
The hostname is registered and bound to the App Service instance.
The domain name must be registered on the App Service before a managed certificate can be issued for it.
3
Create an App Service Managed Certificate for www.contoso.com.
Azure generates and provisions a free certificate for the validated domain.
The certificate can only be generated for a domain that is actively bound to the App Service and resolves correctly.
4
Create an SNI SSL binding for www.contoso.com using the App Service Managed Certificate.
HTTPS traffic is enabled and secured for the custom domain.
Provisioning the certificate is not sufficient; the certificate must be explicitly bound to the custom domain mapping.

Key Concept

Configuring custom domains and TLS/SSL certificates on Azure App Services
Rate this question