Meraj Rasool
Meraj Rasool

Reputation: 751

Validating Domain For AWS ACM in GoDaddy

I have requested an SSL certificate from AWS and I opted for DNS validation. Now they are asking me to add a CNAME record to validate. They have provided me the following to be used:

Name: xxx.example.com.  [Host field on GoDaddy]
Value: xxx.acm-validations.aws. [Points to field on GoDaddy]
Type: CNAME

Now whenever I provide this using GoDaddy DNS interface, it throws an error saying for 'Points to' field:

Enter either @ or a valid host name such as: subdomain.example.tld

Did anyone encounter this issue on GoDaddy DNS entries?

Upvotes: 43

Views: 33252

Answers (7)

王铱辰
王铱辰

Reputation: 1

I agree with 55 ,i tested it. Only difference is now the Godaddy will not remove the dot after aws ,in the record it show _0ba986089fff81c1b4f395a2ea75f42e.hkvuiqjoua.acm-validations.aws. Then immediately, in ACM it is validated

Upvotes: 0

Luis Galvez
Luis Galvez

Reputation: 471

For validating a domain name like example.com you just write the first part of xxx1.example.com. without the domain name and without suffix dot, like this:

TYPE: CNAME
NAME: xxx1
VALUE: xxx2.acm-validation.aws

For validating www.example.com you just write the first part of xxx3.www.example.com. without the domain name and without suffix dot, but including www., like this:

TYPE: CNAME
NAME: xxx3.www
VALUE: xxx4.acm-validation.aws

You can test above configuration after some minutes with:

dig TXT +short +noshort xxx1.example.com

dig TXT +short +noshort xxx2.www.example.com

https://aws.amazon.com/premiumsupport/knowledge-center/acm-certificate-pending-validation/

Upvotes: 23

EdW
EdW

Reputation: 2293

AWS Certificate manager was stuck on pending for me when I configured godaddy. This method worked for me.

On AWS when you "request a certificate"
- For domain name enter example.com (www.example.com did not work.)
- click ->next
- select ->DNS validation
- click ->review
- click ->Confirm and request
- before selecting continue, enter information on godaddy.com DNS (below)

My information was similar to:
example.com   _af2e3647196c.example.com. CNAME _15952034958olprtlswtu.acm-validations.aws.

On godaddy.com
- Login to godaddy.com
- In the control panel select ->manage domains
- select the domain name you want to manage ->example.com
- select ->manage DNS (this link was on the bottom of the page)
- select ->Add (this link was on the bottom right of the Records pane)
- enter information
  -- for Type select ->cname
  -- for Host enter: _af2e3647196c
  -- for Points to enter: _15952034958olprtlswtu.acm-validations.aws
  -- click save

- On AWS click ->Continue
Validation was successful in about 2 minutes

Upvotes: 7

Collin
Collin

Reputation: 6760

The Host field also needed to be changed to xxx. instead of xxx.example.com. for AWS to validate it.

Upvotes: 2

Adi Azarya
Adi Azarya

Reputation: 4493

I would like to share with you how I figured it out.

It may not fit for all but it may help some people.

The steps are:

  1. Go to your AWS account.

    Go to AWS certificate manager and Request a public certificate using DNS

After that you will have this screen:

On the Domain Name enter your domain without www For example example.com (NOT www.example.com)

After the above steps you will see this screen:

Now you have Name & Value.

Go to your Godaddy account and select the domain you have entered at the last section.

Go to the DNS section.

Create CNAME record like this:

Now is the important part...

The Host will receive the AWS certificate manager's Name, BUT just the prefix, for example:

AWS name:

_904706782abb3d16301321f28db53e03.example.com.

You should grab just this _904706782abb3d16301321f28db53e03 for godaddy's Host name. For the "points to" (on your GoDaddy account) input, you should grab the value of the AWS certificate manager. For example:

_0ba986089fff81c1b4f395a2ea75f42e.hkvuiqjoua.acm-validations.aws

By the way, the value comes with a dot at the end, GoDaddy will remove the dot at the moment you click enter. for example:

_0ba986089fff81c1b4f395a2ea75f42e.hkvuiqjoua.acm-validations.aws. will become to

_0ba986089fff81c1b4f395a2ea75f42e.hkvuiqjoua.acm-validations.aws

Finally, it should look like this:

Upvotes: 84

Diya Li
Diya Li

Reputation: 1088

Check out this document to verify your DNS status:

To confirm that the CNAME record was added to correctly to your DNS configuration, run a command similar to the following:

Note: Replace example-cname.example.com with your ACM CNAME record.

Linux and macOS:

dig +short _example-cname.example.com
Windows:

nslookup -type=ns example.com

The command returns the CNAME record’s value in the output if the CNAME record was added to the correct DNS configuration and then propagated successfully.

Upvotes: 0

Mahdi
Mahdi

Reputation: 3349

The Host field should be filled with xxx (your subdomain) and the Points To field with xxx.acm-validations.aws (without dot).

Upvotes: 29

Related Questions