From 475f1043cb6a6814494b3bcee8978af2795f01cf Mon Sep 17 00:00:00 2001 From: Nic <123965403+ngayerie@users.noreply.github.com> Date: Fri, 27 Jun 2025 14:15:20 +0200 Subject: [PATCH 1/4] [DNS] Create acme-challenge-txt-record Case #01621522 --- .../troubleshooting/acme-challenge-txt-record | 31 +++++++++++++++++++ 1 file changed, 31 insertions(+) create mode 100644 src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record diff --git a/src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record b/src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record new file mode 100644 index 000000000000000..e079e709bb9f3d8 --- /dev/null +++ b/src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record @@ -0,0 +1,31 @@ +--- +title: Unexpected _acme-challenge TXT records +pcx_content_type: troubleshooting +sidebar: + order: 11 +head: + - tag: title + content: Unexpected _acme-challenge TXT records are present + +--- + +import { Render } from "~/components" + +You might notice some TXT record `_acme-challenge.` returned by your domain. +These records cannot be found in the DNS tab of your Cloudflare Dashboard. + +## Causes + +These records are automatically created to allow Cloudflare Edge certificates ([Universal](/ssl/edge-certificates/universal-ssl/), [Advanced](/ssl/edge-certificates/advanced-certificate-manager/) and [Backup](/ssl/edge-certificates/backup-certificates/)) to be provisioned. +They are required by the [Certificate Authorities](/ssl/reference/certificate-authorities/) to perform the [Domain Control Validation](/ssl/edge-certificates/changing-dcv-method/). + +## Solution + +As these records are tied to the certificates, they cannot be deleted in the DNS tab of your Cloudflare Dashboard. +If you need more `_acme-challenge.` TXT records in order to provision certificates on your side, you can add them in the [DNS tab of your Cloudflare Dashboard](/dns/manage-dns-records/how-to/create-dns-records/). + +If you want to remove these records: + * You need to [disable Universal SSL](/ssl/edge-certificates/universal-ssl/disable-universal-ssl/) to remove the records related to Universal and Backup SSL. + * You need to [delete advanced certificates](/ssl/edge-certificates/advanced-certificate-manager/manage-certificates/#delete-a-certificate) to remove the records related to Advanced certificates. + + From d4c49cf8d5c0614654e1f0c4d1cf439f681a6887 Mon Sep 17 00:00:00 2001 From: Rebecca Tamachiro Date: Thu, 3 Jul 2025 10:15:35 +0100 Subject: [PATCH 2/4] Add .mdx extension and make frontmatter simpler --- ...me-challenge-txt-record => acme-challenge-txt-record.mdx} | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) rename src/content/docs/dns/manage-dns-records/troubleshooting/{acme-challenge-txt-record => acme-challenge-txt-record.mdx} (94%) diff --git a/src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record b/src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record.mdx similarity index 94% rename from src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record rename to src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record.mdx index e079e709bb9f3d8..cdb45fd5199f0e2 100644 --- a/src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record +++ b/src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record.mdx @@ -3,10 +3,7 @@ title: Unexpected _acme-challenge TXT records pcx_content_type: troubleshooting sidebar: order: 11 -head: - - tag: title - content: Unexpected _acme-challenge TXT records are present - + label: Unexpected TXT records --- import { Render } from "~/components" From 74e1058bee7d0e378161ba12cba806fb81810169 Mon Sep 17 00:00:00 2001 From: Rebecca Tamachiro Date: Thu, 3 Jul 2025 10:24:38 +0100 Subject: [PATCH 3/4] Text review and Style Guide adjustments --- .../acme-challenge-txt-record.mdx | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record.mdx b/src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record.mdx index cdb45fd5199f0e2..e43b70f97787661 100644 --- a/src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record.mdx +++ b/src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record.mdx @@ -6,23 +6,23 @@ sidebar: label: Unexpected TXT records --- -import { Render } from "~/components" +import { Render, GlossaryTooltip } from "~/components" -You might notice some TXT record `_acme-challenge.` returned by your domain. -These records cannot be found in the DNS tab of your Cloudflare Dashboard. +You might notice TXT records like `_acme-challenge.` are returned by your domain but cannot be found on the DNS tab of your Cloudflare dashboard. ## Causes -These records are automatically created to allow Cloudflare Edge certificates ([Universal](/ssl/edge-certificates/universal-ssl/), [Advanced](/ssl/edge-certificates/advanced-certificate-manager/) and [Backup](/ssl/edge-certificates/backup-certificates/)) to be provisioned. -They are required by the [Certificate Authorities](/ssl/reference/certificate-authorities/) to perform the [Domain Control Validation](/ssl/edge-certificates/changing-dcv-method/). +These records are automatically created to allow Cloudflare edge certificates ([universal](/ssl/edge-certificates/universal-ssl/), [advanced](/ssl/edge-certificates/advanced-certificate-manager/), and [backup](/ssl/edge-certificates/backup-certificates/)) to be provisioned. They are required by [certificate authorities](/ssl/reference/certificate-authorities/) to perform [Domain Control Validation (DCV)](/ssl/edge-certificates/changing-dcv-method/). ## Solution -As these records are tied to the certificates, they cannot be deleted in the DNS tab of your Cloudflare Dashboard. -If you need more `_acme-challenge.` TXT records in order to provision certificates on your side, you can add them in the [DNS tab of your Cloudflare Dashboard](/dns/manage-dns-records/how-to/create-dns-records/). +As these records are tied to the certificates, they cannot be deleted from the DNS tab of your Cloudflare dashboard. + +If you need more `_acme-challenge.` TXT records in order to provision certificates on your side, you can [manually add them](/dns/manage-dns-records/how-to/create-dns-records/) under [DNS records](https://dash.cloudflare.com/?to=/:account/:zone/dns/records). If you want to remove these records: - * You need to [disable Universal SSL](/ssl/edge-certificates/universal-ssl/disable-universal-ssl/) to remove the records related to Universal and Backup SSL. - * You need to [delete advanced certificates](/ssl/edge-certificates/advanced-certificate-manager/manage-certificates/#delete-a-certificate) to remove the records related to Advanced certificates. + + * [Disable Universal SSL](/ssl/edge-certificates/universal-ssl/disable-universal-ssl/) to remove the records related to universal and backup certificates. + * [Delete advanced certificates](/ssl/edge-certificates/advanced-certificate-manager/manage-certificates/#delete-a-certificate) to remove the records related to advanced certificates. From dacf16028bf81675611996f3bc9d9472b43fd989 Mon Sep 17 00:00:00 2001 From: Rebecca Tamachiro Date: Thu, 3 Jul 2025 10:34:46 +0100 Subject: [PATCH 4/4] Use GlossaryTooltip to clarify DCV and CA jargon --- .../troubleshooting/acme-challenge-txt-record.mdx | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record.mdx b/src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record.mdx index e43b70f97787661..aea592732498c4d 100644 --- a/src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record.mdx +++ b/src/content/docs/dns/manage-dns-records/troubleshooting/acme-challenge-txt-record.mdx @@ -6,13 +6,13 @@ sidebar: label: Unexpected TXT records --- -import { Render, GlossaryTooltip } from "~/components" +import { GlossaryTooltip } from "~/components" You might notice TXT records like `_acme-challenge.` are returned by your domain but cannot be found on the DNS tab of your Cloudflare dashboard. ## Causes -These records are automatically created to allow Cloudflare edge certificates ([universal](/ssl/edge-certificates/universal-ssl/), [advanced](/ssl/edge-certificates/advanced-certificate-manager/), and [backup](/ssl/edge-certificates/backup-certificates/)) to be provisioned. They are required by [certificate authorities](/ssl/reference/certificate-authorities/) to perform [Domain Control Validation (DCV)](/ssl/edge-certificates/changing-dcv-method/). +These records are automatically created to allow Cloudflare edge certificates ([universal](/ssl/edge-certificates/universal-ssl/), [advanced](/ssl/edge-certificates/advanced-certificate-manager/), and [backup](/ssl/edge-certificates/backup-certificates/)) to be provisioned. `_acme-challenge` records are required by certificate authorities (CAs) so that they can verify your domain ownership before issuing the SSL/TLS certificate. For details, refer to [Domain control validation (DCV)](/ssl/edge-certificates/changing-dcv-method/). ## Solution