SSL update in Cloud Manager | Community
Skip to main content
M
ManjulaKumar
Level 2
September 19, 2025
Solved

SSL update in Cloud Manager

  • September 19, 2025
  • 3 replies
  • 1557 views

We have Cloudflare as CDN and the SSL cert is updated there. 

When I update the SSL cert in Cloud Manager Domain Mapping the cert status shows as deployed and go live button shows up. 

Since this is only updating the expired cert, DNS configure is not required, so I click on go live button and press on ok.

The status doesnot change to verified. 

 

1. Since the cert is already updated in Cloudflare, is it not required to update the cert in Cloud Manager?

2. If it is required to also update the cert in cloud manager, how do I change the status from deployed to verified?

Best answer by EstebanBustamante

Hi @manjulakumar 

 

You don’t need to manage the certificate in Cloud Manager since you’re using your own CDN (Cloudflare). This approach is commonly referred to as BYOCDN (Bring Your Own CDN). You just need to make sure the necessary headers described below are passed from Cloudflare to your origin (AEM Publish server: publish-xxx-xxx.adobecloudaem.com).

 

Please check this out: https://experienceleague.adobe.com/en/docs/experience-manager-cloud-service/content/implementing/content-delivery/cdn#point-to-point-CDN 

 

Hope this helps

 

3 replies

HrishikeshKagne
Community Advisor
HrishikeshKagneCommunity Advisor
Community Advisor
September 19, 2025

Hi @manjulakumar ,

Yes, you still need to update in Cloud Manager - Cloudflare only terminates traffic at the CDN edge, but Adobe’s Cloud Manager also needs the valid SSL cert for the domain mapping inside AEMaaCS. Both layers need the cert.

 

Why status stuck at “Deployed” - “Verified” only shows when the DNS CNAME/alias points correctly to Adobe’s edge and Cloud Manager can validate it. If you only replaced the cert but didn’t touch DNS, Cloud Manager won’t re-check until it can confirm ownership.
Re-upload the cert in Cloud Manager, click Go Live, and make sure the DNS record is still correctly pointing to Adobe’s edge hostname. Once Cloud Manager detects the DNS is good and the new cert is active, it will flip to Verified automatically.

  • Cloudflare CDN cert ≠ AEMaaCS cert.
  • You must also update in Cloud Manager.
  • Status changes to “Verified” only after DNS validation passes with the new cert mapped.
Hrishikesh Kagane
    M
    ManjulaKumarAuthor
    Level 2
    September 19, 2025

    I ran the command curl -I https://yourdomain.com -H 'x-aem-debug:edge=true', it is showing x-cache:MISS. so it is reaching Adobe's Edge. So the record is pointing to Adobe's edge.  I will reupload the cert and see whether anything changes.

     

    Can I use the same cert provided by third party for Cloudflare CDN and Cloud Manager?

    EstebanBustamante
    Community Advisor and Adobe Champion
    EstebanBustamanteCommunity Advisor and Adobe ChampionAccepted solution
    Community Advisor and Adobe Champion
    September 19, 2025

    Hi @manjulakumar 

     

    You don’t need to manage the certificate in Cloud Manager since you’re using your own CDN (Cloudflare). This approach is commonly referred to as BYOCDN (Bring Your Own CDN). You just need to make sure the necessary headers described below are passed from Cloudflare to your origin (AEM Publish server: publish-xxx-xxx.adobecloudaem.com).

     

    Please check this out: https://experienceleague.adobe.com/en/docs/experience-manager-cloud-service/content/implementing/content-delivery/cdn#point-to-point-CDN 

     

    Hope this helps

     

    Esteban Bustamante
      Raja_Reddy
      Community Advisor
      Raja_ReddyCommunity Advisor
      Community Advisor
      September 21, 2025

      Hi @manjulakumar 
      1. Since the cert is already updated in Cloudflare, is it not required to update the cert in Cloud Manager?
      This is because Cloud Manager acts as the origin server and Cloudflare (when using Full or Full (Strict) SSL mode) still requires a valid SSL certificate at the origin for the connection to be trusted and secure.

      So, to maintain a secure end-to-end connection, both Cloudflare (edge) and Cloud Manager (origin) must have valid SSL certificates


      2. If it is required to also update the cert in cloud manager, how do I change the status from deployed to verified?

      • Verification may take some time (usually up to 30 minutes) as the platform runs background checks before updating the status.

      • Since this is a certificate renewal (not a new domain mapping) no DNS configuration should be needed.

      • If the status still doesn’t change after some time, it may be due to a backend issue. In that case, we recommend:

        • Double-checking the certificate's validity and domain match.

        • Re-uploading the certificate if needed.

      https://experienceleague.adobe.com/en/docs/experience-manager-cloud-service/content/implementing/using-cloud-manager/custom-domain-names/check-domain-name-status 
      https://experienceleague.adobe.com/en/docs/experience-manager-cloud-service/content/implementing/using-cloud-manager/custom-domain-names/managing-custom-domain-names 

        M
        ManjulaKumarAuthor
        Level 2
        September 21, 2025

        Thank you @raja_reddy but the problem I am seeing is, if I revert back to the old cert which was working fine. The status is still in deployed for old cert. 

        Raja_Reddy
        Community Advisor
        Raja_ReddyCommunity Advisor
        Community Advisor
        September 26, 2025

        Hi @manjulakumar 
        If reverting to the previous (working) certificate still results in the "Deployed" status and not "Verified", it could indicate that the verification process is stuck or the system hasn’t refreshed properly.

        Terms & ConditionsAccessibility statement

        Loading footer...