The current article describes general steps for adding a new custom domain to Azure Front Door. They are:
- Adding a valid certificate
- Selecting the route you’d like to add a new Custom Domain record to
- Adding a new Custom Domain
- Updating your DNS with a CNAM record to point to Azure Front Door Endpoint URL address
Each step in detail can be found below. For more details, refer to the following Microsoft's documentation:
https://learn.microsoft.com/en-us/azure/frontdoor/standard-premium/how-to-add-custom-domain
If you use your own certificate (not Azure Front Door managed) you need to add it first.
- In Azure Portal under your resource group open a key vault (create one if needed).
- Make sure you have assigned access policy, more details here.
- Navigate to Certificates and import a new certificate, more details here.
- Open Azure Front Door and navigate to Security -> Secrets.
- Click Add certificate and select the imported certificate from the Key vault.

Note: We recommend using a certificate that includes a full chain in order to avoid potential issues in the future, more details here.
- In Azure Portal open Front Door.
- Navigate to Settings -> Front Door manager.
- Select the route.

- On route update page click Add a new domain.

- If you use Azure managed domain, select Azure managed DNS, otherwise select All other DNS services in DNS management.
- Fill in the custom domain value.
- Select a valid certificate.
- Select TLS 1.2 as a minimum TLS version.
- Navigate to Azure Front Door ->Settings -> Domains.
- You should see your domain in the list with DNS state CNAME/alias record is not currently detected.

- Create a CNAME record that will point to Azure Front Door Endpoint URL you have associated your custom domain with.
- Once record created, verify Azure Front Door -> Domains. Your domain should be green with the Traffic is delivered state.
In case of any issues, contact Sitecore Support.