Skip to content

Commit 2214b3c

Browse files
ngayerieRebeccaTamachiro
authored andcommitted
[DNS] Create acme-challenge-txt-record (cloudflare#23281)
* [DNS] Create acme-challenge-txt-record Case #01621522 * Add .mdx extension and make frontmatter simpler * Text review and Style Guide adjustments * Use GlossaryTooltip to clarify DCV and CA jargon --------- Co-authored-by: Rebecca Tamachiro <[email protected]>
1 parent a5b6542 commit 2214b3c

File tree

1 file changed

+28
-0
lines changed

1 file changed

+28
-0
lines changed
Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,28 @@
1+
---
2+
title: Unexpected _acme-challenge TXT records
3+
pcx_content_type: troubleshooting
4+
sidebar:
5+
order: 11
6+
label: Unexpected TXT records
7+
---
8+
9+
import { GlossaryTooltip } from "~/components"
10+
11+
You might notice TXT records like `_acme-challenge.<hostname>` are returned by your domain but cannot be found on the DNS tab of your Cloudflare dashboard.
12+
13+
## Causes
14+
15+
These records are automatically created to allow Cloudflare edge certificates ([universal](/ssl/edge-certificates/universal-ssl/), [advanced](/ssl/edge-certificates/advanced-certificate-manager/), and [backup](/ssl/edge-certificates/backup-certificates/)) to be provisioned. `_acme-challenge` records are required by <GlossaryTooltip term="Certificate Authority (CA)">certificate authorities (CAs)</GlossaryTooltip> so that they can verify your domain ownership before issuing the SSL/TLS certificate. For details, refer to [Domain control validation (DCV)](/ssl/edge-certificates/changing-dcv-method/).
16+
17+
## Solution
18+
19+
As these records are tied to the certificates, they cannot be deleted from the DNS tab of your Cloudflare dashboard.
20+
21+
If you need more `_acme-challenge.<hostname>` TXT records in order to provision certificates on your side, you can [manually add them](/dns/manage-dns-records/how-to/create-dns-records/) under [DNS records](https://dash.cloudflare.com/?to=/:account/:zone/dns/records).
22+
23+
If you want to remove these records:
24+
25+
* [Disable Universal SSL](/ssl/edge-certificates/universal-ssl/disable-universal-ssl/) to remove the records related to universal and backup certificates.
26+
* [Delete advanced certificates](/ssl/edge-certificates/advanced-certificate-manager/manage-certificates/#delete-a-certificate) to remove the records related to advanced certificates.
27+
28+

0 commit comments

Comments
 (0)