From 9454c87ec41944420ffccaaed4360dc479035574 Mon Sep 17 00:00:00 2001 From: Rebecca Tamachiro Date: Wed, 24 Sep 2025 14:30:26 +0100 Subject: [PATCH 1/2] Explain why not multiple CDN and group under new caveats section --- .../changing-dcv-method/methods/delegated-dcv.mdx | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/src/content/docs/ssl/edge-certificates/changing-dcv-method/methods/delegated-dcv.mdx b/src/content/docs/ssl/edge-certificates/changing-dcv-method/methods/delegated-dcv.mdx index 68df716025aad2f..46d88ad5780836b 100644 --- a/src/content/docs/ssl/edge-certificates/changing-dcv-method/methods/delegated-dcv.mdx +++ b/src/content/docs/ssl/edge-certificates/changing-dcv-method/methods/delegated-dcv.mdx @@ -30,13 +30,15 @@ You should use Delegated DCV when all of the following conditions are true: - Your zone is using a [partial DNS setup](/dns/zone-setups/partial-setup/). - Cloudflare is not already [performing DCV automatically](/ssl/edge-certificates/changing-dcv-method/). - Your zone is using an [Advanced certificate](/ssl/edge-certificates/advanced-certificate-manager/). -- Your zone is not using multiple CDN providers. - The Certificate Authority is either Google Trust Services, SSL.com, or Let's Encrypt -:::note[Delegated DCV and origin certificates] +### Aspects to keep in mind -As explained in the [announcement blog post](https://blog.cloudflare.com/introducing-dcv-delegation/), currently, you can only delegate DCV to one provider at a time. If you also issue publicly trusted certificates for the same hostname for your [origin server](/ssl/concepts/#origin-certificate), this will no longer be possible. You can use [Cloudflare origin CA certificates](/ssl/origin-configuration/origin-ca/) instead. -::: +As explained in the [announcement blog post](https://blog.cloudflare.com/introducing-dcv-delegation/), currently, you can only delegate DCV to one provider at a time. This means: + +- If you also issue publicly trusted certificates for the same hostname for your [origin server](/ssl/concepts/#origin-certificate), this will no longer be possible. You can use [Cloudflare origin CA certificates](/ssl/origin-configuration/origin-ca/) instead. + +- If your zone is using multiple CDN providers, you might want to use an alternative [method](/ssl/edge-certificates/changing-dcv-method/methods/). This is because, once the DCV delegation is configured for Cloudflare, only Cloudflare will be able to perform DCV on your behalf, blocking you external CDN providers from doing the same. ## Setup From 1791db69ec18f28982d8fd56ea9881fcb5507905 Mon Sep 17 00:00:00 2001 From: Rebecca Tamachiro <62246989+RebeccaTamachiro@users.noreply.github.com> Date: Wed, 24 Sep 2025 17:30:42 +0100 Subject: [PATCH 2/2] Apply suggestion from code review Co-authored-by: Jun Lee --- .../changing-dcv-method/methods/delegated-dcv.mdx | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/content/docs/ssl/edge-certificates/changing-dcv-method/methods/delegated-dcv.mdx b/src/content/docs/ssl/edge-certificates/changing-dcv-method/methods/delegated-dcv.mdx index 46d88ad5780836b..f50b82761c6a77f 100644 --- a/src/content/docs/ssl/edge-certificates/changing-dcv-method/methods/delegated-dcv.mdx +++ b/src/content/docs/ssl/edge-certificates/changing-dcv-method/methods/delegated-dcv.mdx @@ -38,7 +38,7 @@ As explained in the [announcement blog post](https://blog.cloudflare.com/introdu - If you also issue publicly trusted certificates for the same hostname for your [origin server](/ssl/concepts/#origin-certificate), this will no longer be possible. You can use [Cloudflare origin CA certificates](/ssl/origin-configuration/origin-ca/) instead. -- If your zone is using multiple CDN providers, you might want to use an alternative [method](/ssl/edge-certificates/changing-dcv-method/methods/). This is because, once the DCV delegation is configured for Cloudflare, only Cloudflare will be able to perform DCV on your behalf, blocking you external CDN providers from doing the same. +- If your zone is using multiple CDN providers, you might want to use an alternative [method](/ssl/edge-certificates/changing-dcv-method/methods/). This is because, once the DCV delegation is configured for Cloudflare, only Cloudflare will be able to perform DCV on your behalf, blocking your external CDN providers from doing the same. ## Setup