Domain Management

Plan 1: Use one-click resolution (recommended)

For a domain name that is registered with or transferred to Alibaba Cloud, belongs to the current Alibaba Cloud account, and uses Alibaba Cloud DNS, DNS resolution is completed automatically after binding. Wait approximately 2 to 3 minutes for the system to generate the DNS record value. If the status is not updated, refresh the page manually or click Retry.

• ICP filing: Under applicable national regulations, domains that use nodes in the Chinese mainland must completedomain name filing.

• Account authorization: If this is your first operation, complete authorization as prompted.

If one-click resolution is unavailable, confirm that the domain name was purchased from Alibaba Cloud. If the domain name was purchased from another registrar, confirm that it has been transferred to Alibaba Cloud. If the domain name does not meet the conditions for one-click resolution, use Plan 2: Configure DNS records manually.

Plan 2: Configure DNS records manually

1. ICP filing: Under applicable national regulations, domains that use nodes in the Chinese mainland must completedomain name filing.

2. DNS Verification: If the domain name is not registered with Alibaba Cloud or is not under the current account, complete steps 1 to 3 to configure a TXT record for DNS resolution verification before you add the DNS records.

   1. In the binding status list, click Verify, and copy the Host record and Record value from the dialog box.

   2. Add a TXT record: Go to the DNS resolution console and add the TXT record.

      • For a domain name not registered with Alibaba Cloud, add the domain name TXT record through the provider from which you purchased the domain name.

      • For a domain name that is not under the current account, switch accounts before you proceed. For an Alibaba Cloud domain name, switch to the Alibaba Cloud account that owns the domain name, and then log on to the Alibaba Cloud DNS console. Open the Public authoritative DNS page, and click DNS settings to the right of the corresponding domain name.

   3. Return to the Domain Management page and click Verify. If verification fails, reconfigure the TXT record and verify it again.

3. Get the DNS record value: After a new domain name is added successfully, wait approximately 2 to 3 minutes for the DNS record value to be generated. In the domain name list, find the CNAME record value column and click the copy icon to copy the record value for manual DNS configuration.

4. Configure DNS records: For an Alibaba Cloud domain name, log on to the Alibaba Cloud DNS console, find the domain name, open its DNS settings page, and click Add record. Add the following two DNS records.

   Record	Record type	Host record	Record value	TTL
   Record 1: CNAME record for the www subdomain	CNAME	www	Paste the record value copied in the previous step.	10 minutes
   Record 2: CNAME record for the root domain	CNAME	@ (The @ symbol represents the root domain itself. Some DNS providers may require that you leave this field blank.)	Paste the record value copied in the previous step.	10 minutes

Plan 1: One-click configuration

The system then automatically completes the security configuration.

Plan 2: Manual deployment

If you already have certificate files, follow to configure the certificate. Steps 1 to 3 are completed in the Certificate Management Service console. Step 4 is completed on the Domain Management page.

Step 1: Obtain a certificate

• Alibaba Cloud certificate: The following uses a Personal Test Certificate (Free Edition) as an example. A single free certificate is valid for 90 days and must be reapplied for and installed after it expires. You can purchasea paid certificate based on your requirements. For more information, seeSSL certificate selection.

• Third-party platform: Follow the instructions provided by the relevant platform.

1. Log on toCertificate Management Service console, and in the left-side navigation pane, choose Certificate Management >SSL Certificate Management V2.0. On theIndividual Test Certificate (Formerly Free Certificate) tab, click Purchase Certificate.

2. On the Purchase Certificate page, enter Purchase Quantity, keep the other settings at their default values, select Certificate Management Service Terms of Service and Technical Support Agreement for Certificate Management Service, and click Buy Now to complete payment.

   Note

   • If you do not meetPurchase rules for personal test certificates (Free Edition), seePurchase a personal test certificate (Pro).

   • A Personal Test Certificate (Free Edition) order cannot be canceled after the certificate is claimed. If it is not used within three months after it is claimed, the quota claimed for that year is returned automatically.

Step 2: Apply for a certificate and complete domain validation

The following uses an Alibaba Cloud Personal Test Certificate (Free Edition) as an example:

1. Log on toCertificate Management Service console, and on the Personal Test Certificate (Formerly Free Certificate) tab, click Create certificate.

   

2. Enter the required information below, keep the other settings at their default values, confirm that the information is correct, and click Submit for review.

   Parameter	Description
   Domain name	Enter the domain name for which you want to apply for a certificate, such as example.com.
   Quick issuance	Select Quick issuance and enter the following information.
   Domain verification method	Select Automatic DNS verification. Because the DNS service for example.com in this example is under the current account, the system automatically identifies it as Automatic DNS verification. After purchase, the system automatically performs DNS verification. Wait for the certificate to be issued. If the current Alibaba Cloud account differs from the account that owns the domain's Alibaba Cloud DNS service, select Manual DNS verification or File verification.
   Manual DNS verification	Go to the DNS service provider for the domain name and add the domain verification information to the DNS record list (add a CNAME or TXT DNS record).
   File verification	Verify domain ownership by creating the specified file on the web application server for the domain name. For more information about verification methods, seeDomain ownership verification.
   Contact	Select the contact for this certificate application.

3. Complete domain validation. On the Individual Test Certificate (Formerly Free Certificate) tab, find the target certificate instance, and click Verify in the Actions column. Follow the instructions to complete domain ownership validation.

   After domain ownership validation succeeds, the certificate is typically issued within 1 to 15 minutes. After issuance, the Status changes to Issued. If the certificate is not issued after a long wait, check whether the DNS validation configuration is correct.

   Note

   • The certificate takes effect from the date of issuance and is valid for 90 days.

   • If validation fails to pass for an extended period, for example, due to incorrect file content, mismatched DNS record values, or DNS validation timeout, see FAQ for domain ownership validation for solutions.

Step 3: Download certificate files

1. Find and select the issued certificate. At the lower-left corner of the certificate list, click Download.

2. Select Nginx type, and click Download to download the certificate file package.

   

Step 4: Configure the certificate

If you applied for an SSL certificate on another platform, select the Nginx type when you download it.

1. On the Domain Management page, click Configure Custom HTTPS Certificate in the Actions column.

   If this option is not available, first complete ICP filing or DNS verification as prompted.

2. Fill in certificate information: In the dialog box, enter the following information to enable HTTPS for the website.

   Parameter	Description
   Certificate name	Enter an easily recognizable name.
   Certificate (CRT or PEM)	Open the certificate file in PEM or CRT format with a text editor, copy all its content, and paste it into this text box.
   Private Key (PEM)	Open the certificate private key file in KEY format with a text editor, copy all its content, and paste it into this text box.

   If multiple domain names share the same SSL certificate file, such as a wildcard certificate or a multi-domain certificate, you must click Configure Custom HTTPS Certificate for each domain name separately in the Actions column on the Domain Management page, and enter the same certificate content (PEM or CRT) and private key (KEY). The system does not support applying one certificate to multiple domain names in a single action.