How to Use DNS Validation with AutoInstall SSL for Wildcard SSL Issuance?

Prerequisites

• Access to your AutoInstall SSL dashboard or your agent
• A domain that is up for an SSL certificate
• Can get access to your DNS control panel (Cloudflare, GoDaddy, Route 53, etc.)
• Allow TXT records to be created
• Knowledge of how DNS propagation works

This process will be interrupted in the middle of it if any of the following is skipped.

Steps to Configure DNS Validation for AutoInstall SSL

Step 1: Purchase Wildcard Certificate

• Purchase an AutoInstall-compatible wildcard SSL Certificate and complete the enrollment process. Click on SSL management from the main menu.
• Choose the Domain you want to register. This step sets the domain profile in which the certificate will be issued, so be sure you’re at the correct domain profile before proceeding.

Step 2: Start the SSL Certificate Order

• Type your own domain name as in your DNS zone. Substitute for wildcard certificates: .yourdomain.com
• Once you are sure the domain details are correct, proceed to the validation section.

Note: In the case of a wildcard SSL configuration, DNS validation cannot be ignored by certificate authorities, as it is not valid for every subdomain.

Step 3: Choose DNS Validation as the Validation Method

• We have arrived at the level of validation of the domain; choose DNS Validation from the possibilities. AutoInstall SSL will create a unique TXT record associated with your domain.
• The record is one of many things that the certificate authority needs before the seal can be added. Imagine a handshake: Only people who have access to DNS can answer the question that the CA poses.

Important: Don’t modify the generated value. Just one misplaced character will ruin the match, and the CA will refuse to validate the match at all.

Step 4: Copy the DNS TXT Record Details

AutoInstall SSL will provide three pieces of information:

• Host/Name
• TXT Value
• TTL (Time to Live)

Example:

• Host: _acmechallenge.yourdomain.com
• Value: Xyz123abc456validationtoken
• TTL: 300

PASTE these numbers (and make sure they are all the same each time you do). Everything that comes after matches is broken by a trailing space or swapped character.

This is because Certificate Authorities check your DNS record against itself, word for word. You will lose time if you come across a problem that is a near-perfect copy and it still fails the validation, because a copy and paste would have sorted it out for you in order to put in the time to fix it.

Step 5: Log In to Your DNS Provider

• Now, go to your DNS management panel. You may be using a domain registrar, hosting provider, or a cloud DNS service such as Cloudflare or Route 53.
• Find the domain’s DNS zone. This actually refers to your domain, not a subdomain or a related domain; it’s the zone that is the same as the one you used when you claimed your domain name. Here you can place the AutoInstall SSL’s generated validation record from Step 4.

Step 6: Add TXT Record to DNS:

In your DNS settings, press Add a Record and pick TXT Record as the type

Press down to copy what you’ve found in the Step 4 numbers to the corresponding spots:

• Name/Host
• TXT Value
• TTL

When it is all completed, save the changes.

Important tips:

• If your provider marks a conflict between two entries of the same TXT type under the same host, remove one of those entries (dupeOne, TXT vs dupeTwo, TXT)
• Don’t put in additional spaces when you copy and paste; they are easy to miss and difficult to troubleshoot
• Configures the same host format AutoInstall SSL has included (with an underscore prefix, if applicable)

This is the step where the DNS validation takes place. If something goes wrong here, then it goes downhill from there.

Step 7: Wait for DNS Propagation

• DNS changes are not immediate; they require time to be disseminated, replicated, and propagated throughout the world’s servers.
• The time to propagate can be 5 minutes to an hour, depending on caching and TTL settings of some providers.
• Use a DNS checker tool to make sure that your TXT record appears globally (in other people’s browsers as well as your own).

Warning: Take your time on this step! The most common cause of DNS validation failing on the first attempt is that it’s validated too early.

Step 8: Verify the DNS Record in AutoInstall SSL

• After the propagation appears complete, go back to AutoInstall SSL and choose to click Verify or Check the validation.
• The system will validate your TXT record within their zone, verify that you’re the owner of the domain, and proceed with SSL issuance automatically.
• If this check is successful, generation of the certificate starts without requiring further actions from you. If it does not, don’t worry, as more often than not there is nothing wrong with the setup; it’s just a timing issue.

Step 9: Complete SSL Installation

• Once validated, it is AutoInstall SSL’s task to do the work. It creates the certificate, installs it on your web server, and sets up HTTPS (HTTTP Secure) for your domain automatically.
• Depending on your hosting setup, you might also be allowed to redirect the traffic from your site to the HTTPS version, so that all users are forced to access the secure site.

Result: Website is now served with a valid, DNS-validated SSL certificate without any manual requirements.

What Causes DNS Validation to Fail and How Do You Fix It?

TXT record not found

Extend the time they have for propagation. The one most common one is with providers who use aggressive caching, particularly when using aggressive caching providers.

Incorrect record value

Re-copy the same token as AutoInstall SSL. Try to avoid using copy/paste – just write it again to eliminate the possibility of typographical errors.

Wrong hostname

Double-check the `_acmechallenge` prefix. Unfortunately, underscores are a fast answer that can go easily overlooked.

Multiple TXT conflicts

Clear old or duplicate “Validations” records for the same host. Lookup may be confused by old entries and result in false failures.

Conclusion

DNS validation with AutoInstall SSL is a reliable and secure way to verify domain ownership and issue SSL certificates, especially for wildcard certificates and complex hosting environments.

By correctly adding the required TXT record and allowing time for DNS propagation, you can complete the validation process and enable HTTPS with minimal effort.

Need an automated SSL Certificate? Purchase it at competitive prices. Our team is ready to help you choose the best certificate and ensure a smooth, hassle-free SSL deployment.