---
schema_version: "1"
id: 73b32192f85d704d24e52967f45bff02e579dab5af02c7ec4c3244ae3d84dd19
title: Create a Custom Hostname with a Custom Certificate
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_legacy_create_custom_hostname_with_custom_cert.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_legacy_create_custom_hostname_with_custom_cert.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: 9a5f877dc30fbdc480bd15b093e7f728c5f205691ff36f535a6d99ba3ebbd443
description: When you migrate a legacy zone to a proxy zone, a certificate is automatically created with the validation method set to "http". If you need a different validation method, delete the generated certificate and add a custom one. Create the custom certificate in Business Manager for B2C Commerce or use the addCertificateForZone API.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Create a Custom Hostname with a Custom Certificate

When you migrate a legacy zone to a proxy zone, a certificate is automatically created with the validation method set to "http". If you need a different validation method, delete the generated certificate and add a custom one. Create the custom certificate in Business Manager for B2C Commerce or use the `addCertificateForZone` API.

This task is part of the proxy zone migration sequence. See [Proxy Zone Migration Overview](https://help.salesforce.com/s/articleView?id=cc.b2c_migrating_proxy_zones.htm&release=264.0.0&type=5 "Migrate legacy zones to proxy zones by using B2C Commerce Business Manager or the CDN-API. Proxy zones give you standard eCDN configuration and the latest security features, and they prevent common hierarchy-assignment issues. Migration is required to move to Hyperforce, which doesn't support legacy zones.").

Complete this task only if the auto-generated, HTTP-validated certificate doesn't meet your needs, for example, when you require a specific validation method or you're using a certificate from your own Certificate Authority (CA). Replace the generated certificate with a self-managed (custom) certificate on the new proxy zone.

1. In Business Manager, click App Launcher ![App Launcher](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-cc-b2c_merchandiser_administrator-264-0-0-production-enus/ea76f372-6cfa-42a6-8e7c-05c6df7abed8/cc/b2c_merchandiser_administrator/images/appLauncher.png), and then select **Administration** | **Sites** | **Embedded CDN Settings**.
2. Select the proxy zone from the hostnames list and click **Certificate**.
3. On the Crypto tab, select a zone from the list.
4. Click the **settings icon** on the certificate you want to update.
5. Select **Self-Managed Certificate**.
6. Paste the certificate and private key information from your Certificate Authority provider.
7. Select the hostname to assign the certificate to.
8. Click **Update Certificate**.
    
    ![Update self-managed certificate.](https://sf-zdocs-cdn-prod.zoominsoftware.com/tdta-cc-b2c_merchandiser_administrator-264-0-0-production-enus/ea76f372-6cfa-42a6-8e7c-05c6df7abed8/cc/b2c_merchandiser_administrator/images/b2c_ecdn_managed_host_update.png)

Continue with [Update Authoritative DNS](https://help.salesforce.com/s/articleView?id=cc.b2c_legacy_update_auth_dns.htm&release=264.0.0&type=5 "Point your B2C Commerce storefront's DNS records at the new proxy zone. Get the DNS CNAME record value from the getZonesInfo name property or from Business Manager, and then update the record with your authoritative DNS provider.").