Where can I find the DNS validation records required for domain validation?
The required CNAME validation records are displayed in the certificate details within Traceable. These records must be added to the DNS provider that manages the domain.
How long does domain validation take?
Validation time depends on DNS propagation and AWS Certificate Manager processing. In some cases, validation may complete within minutes, while other environments may require additional time for DNS changes to propagate.
How does Traceable verify domain ownership before issuing a certificate?
Traceable uses DNS-based validation through AWS Certificate Manager (ACM). When you request an auto certificate, Traceable generates CNAME validation records that must be added to the domain's DNS provider. ACM validates these records before the certificate is issued and activated.
What happens if a hosted certificate expires before re-upload?
HTTPS communication may become invalid or untrusted once the certificate expires. To avoid service disruption, renew and upload the replacement certificate before the expiration date.
What happens if the AWS region configured for the certificate does not match the Edge Cluster region?
Traceable cannot attach the certificate to the Edge Cluster if the AWS regions do not match. Ensure that the certificate is provisioned in the same AWS region as the target Edge Cluster deployment before configuration.
What happens after a certificate reaches the Renewal Failed state?
Once a certificate reaches the Renewal Failed state and expires, it is no longer valid for secure HTTPS communication. You must create a new certificate and complete domain validation again before attaching it to the Edge Cluster.
What happens if certificate renewal validation fails?
If certificate renewal validation fails, the certificate transitions to the Renewal Pending state. During this period, the certificate remains valid and continues to function until its expiration date. If the validation issue is not resolved before expiry, the renewal process eventually fails, and the certificate status changes to Renewal Failed.
What action is required when a certificate enters the Renewal Pending state?
You must restore or correct the required DNS validation records in your DNS provider and revalidate the certificate. Once validation succeeds, AWS Certificate Manager (ACM) resumes the renewal process automatically.
Does the existing Edge Cluster deployment process change when using auto certificates?
No. After a certificate becomes active, the Edge Cluster deployment and configuration update process remains unchanged. Existing operational workflows continue to apply.