From ccb809bcdb396400a3499b6f7cf9457775fd5bd5 Mon Sep 17 00:00:00 2001 From: Rebecca Tamachiro Date: Wed, 16 Oct 2024 12:33:16 +0100 Subject: [PATCH] Move SSL/TLS section higher and separate new zone vs conversion --- .../dns/zone-setups/partial-setup/setup.mdx | 23 +++++++++++-------- 1 file changed, 13 insertions(+), 10 deletions(-) diff --git a/src/content/docs/dns/zone-setups/partial-setup/setup.mdx b/src/content/docs/dns/zone-setups/partial-setup/setup.mdx index 29358ded6e9b608..41cd9824f515cd0 100644 --- a/src/content/docs/dns/zone-setups/partial-setup/setup.mdx +++ b/src/content/docs/dns/zone-setups/partial-setup/setup.mdx @@ -9,7 +9,7 @@ head: --- -import { Details, Render } from "~/components"; +import { Details, Render, GlossaryTooltip } from "~/components"; @@ -19,11 +19,20 @@ A partial setup is only available to customers on a Business or Enterprise plan. *** -## Add your domain to Cloudflare +## Before you begin 1. Create a Cloudflare account and add your domain. -2. For your **Plan**, choose **Business** or **Enterprise**. -3. Continue through the onboarding steps, ignoring the instructions to change your nameservers. +2. Choose **Business** or **Enterprise** as your plan. +3. If you are onboarding a new domain to Cloudflare, ignore the instructions to change your nameservers. + +### (Optional) Plan for SSL/TLS certificates + +If you are only using [Universal SSL](/ssl/edge-certificates/universal-ssl/) prior to converting your zone, a certificate will be provisioned for your subdomains only after each of the respective DNS records are [proxied](/dns/manage-dns-records/reference/proxied-dns-records/). Refer to [Enable universal SSL](/ssl/edge-certificates/universal-ssl/enable-universal-ssl/#partial-dns-setup) for details. + +If your domain is sensitive to downtime, instead of using Universal SSL, consider using an [advanced certificate](/ssl/edge-certificates/advanced-certificate-manager/) with [delegated DCV](/ssl/edge-certificates/changing-dcv-method/methods/delegated-dcv//#setup). + +## Add your domain to Cloudflare + 4. On the **Overview** page, select **Convert to CNAME DNS Setup**. 5. Select **Convert** to confirm. 6. Save the information from the **Verification TXT Record**. If you lose the information, you can also access it by going to **DNS** > **Records** > **Verification TXT Record**. @@ -48,12 +57,6 @@ After creating the record, you can use this [Dig Web Interface link](https://dig That record must remain in place for as long as your domain is active on the partial setup on Cloudflare. -## Optional - Provision an SSL certificate - -To provision a Universal SSL certificate through Cloudflare, follow [these instructions](/ssl/edge-certificates/universal-ssl/enable-universal-ssl/#partial-dns-setup). - -If your domain is already live with a partial (CNAME) setup — with Cloudflare or another DNS provider — you cannot use a TXT record for [Domain Control Validation](/ssl/edge-certificates/changing-dcv-method/methods/txt/). That domain's TXT record needs to be reserved for forwarding traffic to Cloudflare. - ## Add DNS records 1. In Cloudflare, [add an `A`, `AAAA`, or `CNAME` record](/dns/manage-dns-records/how-to/create-dns-records/).