API Documentation

On this page

Overview

Domain Management in the Atlas portal enables users to view and manage all domains associated with their Atlas identities, and is a critical piece of Certificate Lifecycle Management. Through the Atlas portal, you can request validation for new domains, delete existing domains, or renew domains before they expire.

Your domains will be added to containers called Identity Profiles. Certificates issued to those domains will include identity information from the associated profile.

Prerequisites

Before you can prove control of a domain, you must have a trial or purchased service on your Atlas account, and at least one validated identity. For more information about our TLS service offerings, please reach out to our GlobalSign Sales team.

When verifying a domain, you will receive an authorization token or an emailed verification link, depending on the verification method you choose. Tokens are valid for 30 days and can be reissued if you are unable to complete domain validation before the token expiration date.

Request a Domain

  1. Login to the Atlas portal.
  2. Click Certificates on the left nav, and then click Domains.
  3. Click New Domain. On the next screen, select the identity profile you wish to add the domain to.
    Note: Only TLS product identities can use Atlas Domain Management.
  4. Enter the fully qualified domain name (FQDN) of the domain you wish to verify.
  5. Click Save and continue.
  6. The domain is now ready for verification. You have 30 days to verify it.

Verify a Domain

Once you have submitted a domain for verification, a domain verification code (DVC) will be generated for you to use to prove control of your domain. This code is good for 30 days and can be renewed when it expires.

  1. Click Verify my domain to continue, or Verify later to do so at a later time.
    1. If you choose to verify the domain later, when you are ready to proceed with the verification, go back to your Domain inventory and select the domain you want to verify, and then click the Verify domain action button on the right side of the screen.
  2. A modal window will display with different domain validation methods: DNS TXT, HTTP, and EMAIL. Select the one you want to use and follow the prompts to validate your domain with that method.
  3. Once you have made the appropriate configurations, click Verify the domain. It may take several minutes for Atlas to show the domain has been activated.

Reset Domain Verification Code (DVC)

A DVC is generated when you first submit a domain for verification. The DVC is good for 30 days and can be reset if you do not complete domain verification before its expiration.

  1. Click Domains on the left nav, select the domain requiring a DVC reset, then click the Reset DVC action button on the right side of the screen.
  2. A new DVC will be made available for you to use when you're ready to start the verification process.

Delete a Domain

You can delete a domain at any time. Doing so will invalidate any verifications you have done on the domain, and you will not be able to issue certificates against the domain until it has been verified again.

  1. Click Domains on the left nav and select the domain you wish to delete.
  2. Click the Delete domain action button on the right side of the screen. 

Frequently Asked Questions

What is the difference between Expiration Date and Verify Before Date?

Expiration Date indicates when your domain will expire, or how long your domain will remain active. If no expiration date is listed for a domain, that means that it has not been verified. The Verify Before Date indicates by when a domain needs to be verified before the DVC expires (30 days after the domain is first submitted for verification).

Can I see which domain verification method has been used?

Yes, your Domain inventory will display the verification method used to validate a domain.

  1. Login to the Atlas portal.
  2. Click Domains on the left nav.
  3. The Domain has the column name Last verification Method which indicates the method used to verify the domain.
  4. If you select the domain, on the right side of the screen you would see the Domain Verification History, which serves as a log of actions that have been done with that particular domain. 

What happens when my domain expires?

TLS domains are typically valid for 13 months; when a domain expires, you cannot issue certificates for that domain and must revalidate it.

What should I do if I get this error message?

"DNS domain validation error: "status": "ERROR","description": "read tcp (ip-address)->(ip-address): i/o timeout","timestamp": 1697487367,"method": "DNS"}"?

If you encounter a timeout or SERVFAIL results when performing a DNS verification, it might be due to a geographic block or IP restriction. Please have your IT technician review your policies regarding the implementation of regional geographic or IP restrictions.

Note: SERVFAIL may also be a symptom of a DNSSEC validation chain error.