This article describes the process of configuring a CNAME setup at Cloudflare.

Task 1 - Activating CNAME setup for a domain

Review our guide that explains the benefits and limitations of a CNAME setup.

1. Create a Cloudflare account and add your website.
   Stop when the website instructions ask you to change your nameservers.
2. Upgrade the domain to a Business plan or higher as needed
3. Contact Cloudflare Support to request allowance of a CNAME setup for a specific domain.  Mention CNAME setup for <domain> in the subject line.
   
   
   Enterprise customers can enable CNAME setups for any of their Business or Enterprise domains by requesting Cloudflare support enable the CNAME setup self-service feature.  Once enabled for a Cloudflare account, Enable Partial Setup appears in the Overview app of the Cloudflare Dashboard for Business or Enterprise domains with the account.
4. Cloudflare Support will confirm the CNAME setup has been enabled.
5. A TXT record will appear in the Cloudflare DNS app under the Verification TXT Record section.  Add the TXT record to your authoritative DNS.
   The TXT record must remain in authoritative DNS for the duration Cloudflare's services are utilized.
6. After a few hours, Cloudflare will have verified the TXT record and sent a confirmation email.
7. Provision Universal SSL for the domain.

Task 2 - Provision Cloudflare Universal SSL for CNAME setup

Cloudflare's Universal SSL certificate will be deployed once a domain is activated on the CNAME setup and proper Domain Control Validation (DCV) records have been added to authoritative DNS:

1. Fetch DCV records from the Cloudflare API or via the Cloudflare dashboard:
   

   • Log in to your Cloudflare account and select the appropriate domain.

   • Click the SSL/TLS app.

   • Click the Edge Certificates tab.

   • Under Edge Certificates, click on the certificate where the Type is Universal and Status is Pending Validation to view the Certificate validation request and Certificate validation response information.

2. Add the DCV records as CNAME records within the domain's authoritative DNS (not the Cloudflare DNS app).
3. Add DNS records for the CNAME setup.

Task 3 - Adding DNS records to a CNAME setup

Once a CNAME setup is enabled, DNS records must be updated in both Cloudflare's DNS app and your authoritative DNS:

1. Add an A or CNAME record in the Cloudflare DNS app for the subdomain.
   
   An orange-cloud icon beside the DNS record will proxy traffic to Cloudflare.
2. Edit the corresponding CNAME record in your authoritative DNS to append .cdn.cloudflare.net to the hostname.

For example, when configuring www.example.com on a CNAME setup with Cloudflare, the CNAME record in authoritative DNS would need to point to www.example.com.cdn.cloudflare.net.

www.example.com CNAME www.example.com.cdn.cloudflare.net

CNAME records can be added to your authoritative DNS for each subdomain to be proxied to Cloudflare.

Related resources

• Managing DNS records in Cloudflare
• What is Domain Control Validation (DCV)
• Changing DCV method