Skip to main content

Custom Domain

Custom Domain in DSALTA helps organizations continuously verify that employee devices meet required security baselines.

Written by John Ozdemir
Updated over 3 weeks ago

This guide explains how to serve your DSALTA Trust Center from your own domain (for example, trust.yourcompany.com) using Custom Hostnames and TXT-based validation.

Once the setup is complete:

  • Your Trust Center is accessible from your own domain

  • SSL/TLS is automatically issued and managed

  • No manual certificate renewal is required

DSALTA uses Cloudflare to securely provision custom hostnames and SSL certificates.


What This Feature Enables

Custom Domain
Serve your Trust Center from a branded URL such as trust.yourcompany.com.

TXT Validation
Verify domain ownership via DNS records.

Automatic SSL/TLS
Certificates are issued and renewed automatically after verification.


Overall Setup Flow

  • Register your custom domain in DSALTA

  • Add the required DNS records

  • Verify domain ownership and SSL

  • Publish the domain live


Registering Your Custom Domain

Go to Trust Settings → Custom Domain Settings in the DSALTA dashboard.

Enter your desired domain (for example, trust.getdsalta.com) and click Save Changes.

After saving, DSALTA will generate the DNS records required to complete the setup.


DNS Configuration

You must add the following records at your DNS provider.

CNAME Record (Required)

This record routes traffic to DSALTA’s Trust Center infrastructure.

Field

Value

Type

CNAME

Name / Host

trust

Target / Value

trust.dsalta.com

TTL

Auto

If you are using Cloudflare DNS, this record can be proxied.


Ownership Verification TXT Record (Required)

This TXT record proves domain ownership.

The exact name and value are generated by DSALTA and must be copied exactly.

Field

Value

Type

TXT

Name

_cf-custom-hostname.trust.yourcompany.com

Value

16dbb1ba-dd9c-4bc5-ba24-f70d19832301

TTL

Auto

Do not wrap the value in quotes.


Domain Verification

After adding the DNS records, return to DSALTA and click Check Status or Verify Now.

DSALTA checks:

  • The CNAME record

  • The ownership verification TXT record

  • SSL validation readiness

If successful, the status updates to:

  • Domain: verified (pending publish)

  • SSL: active


Publishing the Domain

Once verification is complete, click Publish to Live.

DSALTA will:

  • Attach the domain to the live Trust Center environment

  • Trigger a short deployment process

The deployment typically takes between 5 and 15 minutes.

After completion, the domain status becomes:

  • Domain: published

  • SSL: active

Your Trust Center is now live on your custom domain.


How TXT-Based SSL Validation Works

DSALTA uses TXT-based ACME validation to issue SSL certificates.

  • Cloudflare generates SSL validation tokens

  • Tokens are published as TXT records in your DNS

  • Once detected, SSL is automatically issued

SSL validation records usually start with _acme-challenge.

These tokens may rotate periodically. If validation fails, always ensure the latest TXT values are present in DNS.


Common Issues and Notes

Domain verified, but the site is not accessible

DNS propagation may take between 5 and 60 minutes. In rare cases, global propagation can take up to 24 hours.

TXT record added, but statusis still pending

Confirm that the TXT name and value match exactly. Remove outdated _acme-challenge records if present.

Cloudflare SSL mode

Set SSL/TLS encryption mode to Full or Full (Strict) to avoid redirect or certificate issues.

Did this answer your question?