Secure JavaScript websites with custom domains and certificates

Learn how to create a web app on Azure and purchase an Azure Domain name secured with an TLS/SSL certificate. The same process works for both Azure Function apps and Azure App service (web apps).

If you want to bring your own domain name or SSL certificate, use these resources:

• Map an existing custom DNS name to Azure App service
• Add custom SSL certificate to Azure App service

1. Get an Azure domain for App Service

You can purchase a domain name in the Azure portal, specifically for your Azure Web app, or you can bring your own domain.

The domain resource is a separate resource from the web app resource.

1. In the Azure portal, use this link to begin creating a new domain.

2. As part of the creation process, create a new resource group to contain all the resources for your secured and named web app.

3. In the Domain Details, enter the domain name you want, such as cats-flying-dogs.com. You should have a few domain name choices with variations to try.

   

4. Continue filling out the creation tabs for the service:

   Tab name	Select
   Contact information	Personal or corporate information about web site ownership.
   Hostname assignment	Keep the default settings.
   Advanced	Keep the default settings so your domain name renews next year and your contact information is kept private.

5. When you are done, select Review + create at the bottom of the web site.

   The domain name is purchased for you and billed to your Azure subscription.

2. Create a new web app service

Create a new paid web resource using one of the following links. Do not create the resource using a free pricing tier. Create the resource in the resource group created in the previous section.

• Azure App service (web app)
• Azure Function

3. Configure domain for web app service

Create Azure App Service Domain

1. In the Azure portal, for your new web app, select the Custom domains setting, then select + Add custom domain.

   

2. In the right panel, enter the new domain name, such as cats-flying-dogs.com, then select Validate.

3. Select the Add custom domain to connect the domain name to the app service's IP address.

   

Bring your own domain

1. In the Azure portal, for your new web app, select the Custom domains setting, and copy your IP Address.

2. Select + Add custom domain.

   

3. In the right panel, enter your domain name, such as www.dinatests.me, then select Validate.

4. Select the Hostname record type to indicate if the domain name includes subdomains.

5. From the Azure portal for your web app, copy the web app domain name, such as https://web-app-test.azurewebsites.net, but remove the https:// when you copy the host name in the next step.

6. In your domain provider's site, create a new TXT record. Add the Verification ID as a TXT record with your domain provider.

CNAME record and paste the web app domain name into the Hostname field. Copy the Custom Domain Verification ID and enter that CNAME record in your domain name provider's site.

4. Create free managed private certificate

1. Select TSL/SSL Settings from the Settings area.

   

2. Select Private Key Certificates then select + Create App Service Managed Certificate

   

3. Select the new domain name then select Create.

   

   This may take a minute or two to complete.

5. Add binding between certificate and domain

1. Select the Custom domains setting, then select Add binding for the new domain name.

   

2. In the right panel, select the new domain, the private certificate, and the TLS/SSL type.

   

3. The process completes and the Custom Domain page shows the custom domain name is secure.

   

4. Select the app's Overview page and see the URL for your web app uses the new domain name.

Learn more about securing your web app service

You can use existing domain names and certificates or you can create new domain names and certificates on your hosting services:

Azure host service	Custom domain name	Certificates
Azure Static Web Apps	Use existing custom domain
Azure Functions & Apps	Buy custom domain name on Azure Map existing domain name Map with Traffic Manager	Create free managed certificate Import existing certificate from Key Vault Upload private certificate Upload public certificate Configure SSL bindings
Container Instances		Using sidecar container

Next steps

• Deploy a web app