By default, your Application Workspace zone uses a domain similar to your-company.recastsoftware.cloud. As an alternative, you can set up a custom domain, such as apps.your-company.com, to provide admins and users with a more memorable URL.
To simplify certificate management and renewal, Application Workspace uses Azure-managed certificates for custom domains. As part of this process, Azure must verify ownership of your custom domain.
You can choose to configure a custom domain during the initial zone setup or after setup. If you add the custom domain after the initial zone setup, you'll need to submit a request to Recast Support to start the process.
To configure a custom domain for your zone:
1. Add the domain validation TXT record you received from Recast to your public DNS.
NOTES:
- Azure uses the TXT record to validate ownership of the domain.
- The validation request expires after seven days. If it expires before validation finishes, contact Recast Support for a new TXT record value.
- After Azure validates the domain and you confirm that the custom domain works, you can remove the TXT record.
2. Wait for Azure to validate domain ownership. Validation usually finishes within eight hours but may take up to 48 hours. After Azure validates the domain, it automatically provisions the certificate.
You can verify the TXT record by running the following command in a terminal or command prompt:
nslookup -type=TXT _dnsauth.apps.your-company.com
The command should return the TXT record value.
3. Configure the CNAME record by pointing your custom domain directly to the Azure Front Door endpoint that Recast provides with the TXT record.
IMPORTANT: Do not point the CNAME record to your Application Workspace zone name, such as your-company.recastsoftware.cloud.
The correct CNAME target should be provided together with the TXT record. If it is not available, you can find it by performing an NSLOOKUP against the Application Workspace zone name. The Azure Front Door endpoint will end with 'azurefd.net'. In this example, the Azure Front Door endpoint is: xyz-byg8aebjb3chcma0.z01.azurefd.net
Example:
nslookup your-company.recastsoftware.cloud [output omitted] Aliases: your-company.recastsoftware.cloud xyz.recastsoftware.cloud xyz-byg8aebjb3chcma0.z01.azurefd.net
4. Add the custom domain to Application Workspace by navigating to Manage > System > Domains and entering your custom domain as the Virtual host value.
NOTE: You do not need to upload a certificate. Azure automatically provisions and manages the certificate after it validates domain ownership.
5. If your domain uses Certification Authority Authorization (CAA) records, allow DigiCert to issue certificates by adding the following record if it is not already present:
0 issue "digicert.com"
NOTE: If your domain does not use CAA records, you do not need to take any action.
After you complete the DNS and Application Workspace configuration, confirm that the custom domain resolves and opens your Application Workspace zone.
