By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

AWS Certificate Manager (ACM) was unable to renew the certificate automatically using DNS validation

0

To renew this certificate, you must ensure that the proper CNAME records are present in your DNS configuration for each domain listed below. You can find the CNAME records for your domains by expanding your certificate and its domain entries in the ACM console. You can also use the DescribeCertificate command in the ACM API[1] or the describe-certificate operation in the ACM CLI[2] to find a certificate’s CNAME records. For more information, see Automatic Domain Validation Failure in the ACM troubleshooting guide[3].

We are using AWS managed ACS and I am not clear what action to be done from above description please help ??

Topics
Networking & Content DeliverySecurity, Identity, & Compliance
Tags
Amazon Route 53AWS Certificate Manager
Language
English
rePost-User-4729201
asked 2 years ago538 views
1 Answer
0

DNA validation is one method to prove your ownership of your domain to ACM. For this purpose, you need to find the provided CNAME record in ACM for each domain and ensure that a corresponding CNAME record exists in your DNS hosted zone.

For a step-by-step visual guide of finding the CNAME in ACM console and adding it to the DNS hosted zone please check the below article or video

Blog: Easier Certificate Validation Using DNS with AWS Certificate Manager

Video: Why is my AWS Certificate Manager (ACM) certificate DNS validation status still pending validation?

For more details about DNS validation please check the link below

DNS validation

Hope this helps!

profile pictureAWS
EXPERT
Nima-AWS
answered 2 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content