AZ-104 Microsoft Azure Administrator Exam

Verify Domain Ownership and Configure DNS Records

Domain ownership verification is crucial when mapping a custom DNS name to an Azure App Service. This process ensures that the domain is correctly linked to your Azure resources and is secure.

Prerequisites

Before starting, ensure your App Service app is not in the Free tier. You need access to the Azure portal and your domain provider's website.

Get a Domain Verification ID

1. Verify domain ownership by adding a domain verification ID with your domain provider.
2. Enable the domain name in your App Service app to avoid downtime during DNS resolution.

Steps:

• Open the Azure portal and navigate to your App Service app.
• Select Custom domains from the left pane.
• Copy the Custom Domain Verification ID from the Custom domains pane.

Create DNS Records

1. Sign in to your domain provider's website.
2. Navigate to the DNS records management page.
3. Add a TXT record for domain verification. The host name for the TXT record depends on the type of DNS record you want to map.

Example:

• DNS record example: @ (root)
• TXT host: _asuid
• TXT value: Domain verification ID from the Azure portal

Remap the Active DNS Name

To point your active DNS record to the App Service:

1. Get the App Service app's external IP address from the Custom domains pane.
2. Remap the A or CNAME record on your domain provider's DNS records page.

Example:

• FQDN example: contoso.com (root)
• Record type: A
• Host: @
• Value: IP address from the Azure portal

Validate Domain Ownership and Complete the Mapping

1. Back in the Add custom domain dialog in the Azure portal, select Validate.
2. Ensure green check marks appear next to both domain records. If errors occur, resolve them on your domain provider's website.
3. Add the custom domain to the list. If you see a red X with No binding, add a private certificate for the domain and configure the binding.

Test the DNS Resolution

Browse to the DNS names you configured. If you encounter errors:

• Clear the browser cache and test again.
• Remap the A record if the IP address has changed.

By following these steps, you can successfully verify domain ownership and configure DNS records for your Azure App Service, ensuring secure and uninterrupted access.

In conclusion, mapping an existing custom DNS name to an Azure App Service involves validating domain ownership through DNS TXT records, configuring CNAME or A records, and ensuring proper propagation of DNS changes. These steps, along with regular checks and adjustments, help maintain a secure connection between your domain and Azure App Services, offering smooth and ongoing access for users.