ACM was unable to renew the certificate automatically using DNS validation. Next step verification.

0

Problem: AWS Certificate Manager (ACM) was unable to renew the certificate automatically using DNS validation. Site has been running for one year.

Fix: To renew this certificate, you must ensure that the proper CNAME records are present in your DNS configuration for each domain.

My setup:

  • Purchased domain name through GoDaddy
  • GoDaddy pointing at AWS NS
  • Static HTML files hosted in web-enabled S3
  • Using AWS Cloudfronts
  • Using Route52 for hosted Zone
  • Using AWS certificate manager for certs

I found the required CNAME name/value for each of the domains in ACM. I can see the Renewal Status is set to ‘Pending validation’ for each.

Hosted Zone currently includes; A, NS, SOA, records but no CNAME records.

Questions: Is my next step to add these CNAME name/value records to the ‘Records’ section of the Hosted Zone? Are there any changes I should make to the name/value strings, like removing period postfix? Is there anything else I will need to do?

Thank you for any assistance.

wall-x
已提問 2 年前檢視次數 379 次
1 個回答
0
已接受的答案
AWS
SeanM
已回答 2 年前
  • Thank you SeanM. So instead of adding records manually I can just use the 'Create records in Route53' button. Will there be anything else to do ... besides test after some period? The test would be to check on Renewal Status, then also confirm site's cert on the day it was due to expire I assume.

    Thanks again.

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南