HaloCRM Guides

Troubleshooting Issues with CNAME DNS Records

AWS certificates expire within 3 days of being requested so set the records as soon as possible. If it has been more than 3 days, please update the same ticket with this information.
The value field in your CAA record must contain one of the following domain names:
- amazon.com
- amazontrust.com
- awstrust.com
- amazonaws.com
Useful links for CAA configuration
The DNS type should only be CNAME, not A, not txt etc.
DNS providers use different formats for their records. While CNAME records are provided with instructions to copy and paste them exactly, some DNS providers may automatically append the domain name. In such cases, the domain may need to be removed to ensure proper configuration.
Check all CNAME records actually resolve to the correct domain.
Make sure underscores and commas are in the appropriate locations, i.e front and back respectively.
Make sure all records provided are set i.e the normal cname and the validation cname records. They can all be validated by using PowerShell and running the command 'resolve-dnsname "hostname"' e.g resolve-dnsname halo.haloservicedesk.com. You can verify the records have indeed been set correctly using this or https://mxtoolbox.com/ or nslookup in cmd.
Make sure you own the domain e.g domain.com compared to domain.co.uk or domain.org etc.
Make sure the TTL (time to live) is set to the minimum i.e 1 minute.
Make sure the DNS is external not internal and publish the records.

If unsure about any of these points above, please contact the Halo support team.