Configure a Custom Domain and SSL Certificate for Azure Web App | Contoso1812

Configure Custom Domain and SSL Certificate for Azure Web App

Prev Question Next Question

Question

You have an Azure subscription.

You create an Azure web app named Contoso1812 that uses an S1 App Service plan.

You plan to -

create a CNAME DNS record for www.contoso.com that points to Contoso1812.

You need to ensure that users can access Contoso1812 by using the https://www.contoso.com URL.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D. E. F.

BF

B: You can configure Azure DNS to host a custom domain for your web apps. For example, you can create an Azure web app and have your users access it using either www.contoso.com or contoso.com as a fully qualified domain name (FQDN).

To do this, you have to create three records:

A root "A" record pointing to contoso.com

A root "TXT" record for verification

A "CNAME" record for the www name that points to the A record

F: To use HTTPS, you need to upload a PFX file to the Azure Web App. The PFX file will contain the SSL certificate required for HTTPS.

https://docs.microsoft.com/en-us/azure/dns/dns-web-sites-custom-domain

To ensure that users can access Contoso1812 by using the https://www.contoso.com URL, you need to complete the following two actions:

  1. Add a hostname to Contoso1812: You need to add a custom domain name to the App Service that is hosting the web app. In this case, you will add www.contoso.com as a custom domain name for the web app. To add a hostname, follow these steps:

a. In the Azure portal, go to the Contoso1812 app service, and select Custom domains from the left-hand menu. b. Click on the Add custom domain button, and enter www.contoso.com as the domain name. c. Follow the instructions to verify that you own the domain.

  1. Upload a PFX file to Contoso1812: Once you have added the hostname, you need to secure the custom domain with an SSL certificate. To do this, you can either use a certificate from a trusted certificate authority (CA), or you can upload a PFX file that contains a self-signed certificate.

In this case, we will assume that you have a PFX file that contains a self-signed certificate for www.contoso.com. To upload the PFX file, follow these steps:

a. In the Azure portal, go to the Contoso1812 app service, and select TLS/SSL settings from the left-hand menu. b. Click on the Private Key Certificates (.pfx) tab, and then click on the Upload Certificate button. c. Follow the instructions to upload the PFX file, and enter the password for the certificate. d. Once the certificate has been uploaded, click on the Bindings tab, and then click on the Add TLS/SSL Binding button. e. Select the custom domain name (www.contoso.com), and then select the certificate that you just uploaded. f. Click on the Add Binding button to save the configuration.

Note that if you use a certificate from a trusted CA, you do not need to upload a PFX file. Instead, you can select the certificate from the Certificate store tab in the TLS/SSL settings blade, and then bind it to the custom domain name.

Prev Question Next Question