Skip to content

Commit df4bdf9

Browse files
Move full API Access error to body and add solution details
1 parent b0dfa9a commit df4bdf9

File tree

1 file changed

+10
-5
lines changed

1 file changed

+10
-5
lines changed

src/content/docs/ssl/origin-configuration/origin-ca/troubleshooting.mdx

Lines changed: 10 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -44,15 +44,20 @@ Use the following link to download an RSA version of the root certificate and up
4444

4545
* [Cloudflare Origin RSA PEM](/ssl/static/origin_ca_rsa_root.pem)
4646

47-
## Error message `Failed to validate requested hostname <hostname>: This zone is either not part of your account, or you do not have access to it`
47+
## This zone is either not part of your account, or you do not have access to it
48+
49+
When trying to generate an Origin CA on the dashboard, you find the error `Failed to validate requested hostname <hostname>: This zone is either not part of your account, or you do not have access to it`.
4850

4951
### Cause
50-
This is a known issue where whilst being created on the Cloudflare Dashboard, Origin CA requires API access for the user creating the origin certificate.
51-
If API Access is disabled for the account, this error is returned.
52+
This is a known issue where, whilst being created on the Cloudflare dashboard, Origin CA requires API access for the user creating the origin certificate.
53+
If the user does not have **API Access**, this error is returned.
5254

5355
### Solution
54-
Please make sure that user creating the certificate has access to the API.
55-
You can check under Account Home > Manage Account > Members: toggle `Enable API Access` to On.
56+
Make sure that the user creating the certificate has access to the API. You can check under **Account Home** > **Manage Account** > **Members**:
57+
58+
- The default setting for the account is specified in the card **Enable API Access**.
59+
- Specific user API Access (which can override the default setting) is presented after selecting the user in the list of members.
60+
5661

5762
## Origin Server page is showing Origin CA from another zone from the account
5863

0 commit comments

Comments
 (0)