Question

Difficulty: MediumConfigure Azure App Service Web Apps

You are configuring a custom domain `www.contoso.com` for an Azure App Service web app named `app-prod-west`. You must secure the custom domain by using a free App Service Managed Certificate. Which sequence of steps should you perform to complete the configuration?

  1. 1Create a CNAME record at your DNS provider that maps `www` to `app-prod-west.azurewebsites.net`.
  2. 2Add the custom domain `www.contoso.com` to the App Service web app's Custom Domains configuration.
  3. 3Create a free App Service Managed Certificate for the custom domain.
  4. 4Add a TLS/SSL binding that associates the custom domain with the newly generated certificate.

Answer

First, create a CNAME record mapping the domain to the app's default host name. Second, add the custom domain to the App Service web app. Third, create a free App Service Managed Certificate. Finally, create a TLS/SSL binding associating the domain with the certificate.
To secure a custom domain using an App Service Managed Certificate, the domain must first be pointed to the web app's default URL via DNS. Once the DNS propagates, you register the custom domain in the App Service. After registration, Azure can issue the managed certificate for that validated domain. Finally, you bind the domain to the certificate to enable HTTPS traffic.

Step-by-Step Solution

1
Configure DNS mapping
The DNS registrar has a CNAME record mapping `www.contoso.com` to `app-prod-west.azurewebsites.net`.
Azure App Service must verify domain ownership via external DNS queries before allowing registration.
2
Register the domain on Azure
The domain is successfully validated and added to the Custom Domains blade of the web app.
The web app must be configured to accept and route requests coming from the custom host name.
3
Generate the managed certificate
Azure generates and renews a free App Service Managed Certificate for the domain.
The certificate can only be issued once Azure can verify that the custom domain resolves to the App Service web app.
4
Apply TLS/SSL binding
The custom domain is configured with SNI SSL using the managed certificate, securing HTTPS traffic.
Applying the binding completes the setup and secures incoming traffic on port 443.

Key Concept

Configuring custom domains and securing them with App Service Managed Certificates in Azure App Service.
Rate this question