Convert partial setup to full setup
If you initially set up a partial domain on Cloudflare, you can later migrate it to a
. full setup
Step 1 — Prepare Cloudflare SSL/TLS
In the Cloudflare dashboard, either order an
or advanced certificate for your website or application. upload a custom SSL certificate
You should also verify that the
of your SSL certificate is status Active.
It is possible to use
instead, but you should consider the following: Universal SSL Universal certificates can take at least to be issued. 15 minutes You should make sure to add Cloudflare nameservers to your registrar within 72 hours of the conversion process. Universal SSL only supports first-level subdomains. To minimize downtime, it is recommended having a certificate in place beforehand.
Step 2 — Update settings in authoritative DNS
At least 24 hours prior to converting your zone, disable DNSSEC at your authoritative DNS provider.
As a best practice, you should also delete the previous at your authoritative DNS provider. To locate this value in the Cloudflare dashboard, go to zone activation TXT record DNS > Records and find the Verification TXT Record.
Step 3 — Convert to full setup
In the Cloudflare dashboard:
Go to DNS > Settings. Select Convert to Primary DNS (this will not affect how your traffic is proxied). Import your records into Cloudflare DNS and verify that they have been configured correctly. Usually, you will want to import . unproxied records
Step 4 — Activate full setup
Get your assigned Cloudflare nameservers from
DNS > Records and at your registrar. update your nameservers If you are counting on Universal SSL certificates to cover your website or application, make sure to add Cloudflare nameservers to your registrar within 72 hours of the conversion process.
Cloudflare recommends that you also
from enable DNSSEC DNS > Settings and add the DS record to your registrar.
Once all the DNS TTLs expire, all your DNS queries will be answered by the Cloudflare global network.
Start proxying additional hostnames by enabling the
(also known as orange-clouding) for specific DNS records. Previously proxied subdomains will continue to be proxied without any interruption. proxy status