Every embedded CDN (eCDN) zone requires a valid SSL certificate. Proxy zones can use either an eCDN managed certificate that's issued and auto-renewed by Salesforce or a self-managed certificate that you upload and renew yourself in Business Manager before it expires. Legacy (root) zones, for example, brand.com, support only a self-managed certificate. After adding or updating a certificate, map DNS so the hostname's traffic routes to its eCDN zone.
Which Salesforce Commerce Product Do I Have?
Certificates in Legacy and Proxy Zones
A legacy zone and a proxy zone for the same hostname can't co-exist in the same realm and
Cloudflare account. When the same hostname (for example, us.brand.com) is
served from both a root zone (brand.com) and an eCDN proxy zone (ending in
cc-ecdn.net), you must have a valid certificate in both zones. If
either certificate expires, or the proxy zone is missing the hostname, that zone can't serve
traffic. Upload a valid certificate or use an eCDN managed auto-renewing certificate.
- DNS Mapping for eCDN Zones in B2C Commerce
To route a hostname's traffic through its embedded CDN (eCDN) zone, map DNS from your provider to the zone and validate the zone's SSL certificate. Understand the mapping rules, validation methods, and certificate limits before you add or update a certificate. - Map DNS to an eCDN Zone for B2C Commerce
After a hostname is active, map DNS at your provider so that the hostname's traffic routes to its embedded CDN (eCDN) zone. Use this procedure whenever you add or update a certificate for a zone. - Add a Managed SSL Certificate for B2C Commerce
Add an eCDN managed SSL certificate to a hostname for a zone, validate it, and map DNS so the hostname's traffic routes to its zone. eCDN managed certificates are issued and auto-renewed by Salesforce. - Add a Self-Managed SSL Certificate for B2C Commerce
Add a self-managed SSL certificate to a hostname for a zone, validate it, and map DNS so the hostname's traffic routes to its zone. You upload and renew self-managed certificates yourself. - Update a Managed SSL Certificate
When your managed SSL certificate expires, or you update the hostnames assigned to a managed SSL certificate, update the certificate in Business Manager for B2C Commerce. - Update a Self-Managed SSL Certificate
When your self-managed SSL certificate expires, or you update the hostnames assigned to a self-managed SSL certificate, upload a replacement certificate in Business Manager for B2C Commerce and remap DNS. - Update Authoritative DNS for an eCDN Zone
Point your B2C Commerce storefront's DNS records at your embedded CDN (eCDN) zone. Get the DNS CNAME record value from thegetZonesInfoname property or from Business Manager, and then update the record with your authoritative DNS provider.