# Using your own domain (CNAME)

### Before you start

* You’ll need a domain you control (for example, `acme.com`) and access to its Domain Name System (DNS) settings at your registrar or DNS host.
* You must use a **subdomain** (for example, `backup.acme.com`). A CNAME cannot live at the root of a zone (such as `acme.com`) because the apex must also hold mandatory SOA and Name Server records. Some DNS providers offer workarounds like “CNAME flattening,” but our flow expects a standard **subdomain CNAME**.

### Step-by-step Instructions: 

#### Pick your subdomain

Choose something short and clear (for example, `backup.acme.com`). Keep it a **subdomain**, not the bare domain.

#### Create the CNAME at your DNS provider

* Sign in to your DNS host (often your domain registrar).
* Add a **CNAME** record:
  * **Name / Host:** `backup`
  * **Type:** CNAME
  * **Value / Target:** your tenant’s **Primary hostname** shown in our app (for example, `abcd1234.obcbackup.com`).
* Save the record.

#### Verify and attach inside eazyBackup

1. Go to **Partner Hub → White-label Tenants**.
2. Click **Manage** on the tenant you’re configuring and open **Manage Branding**.
3. In the **Hostname / Custom Domain** section:
   * Enter your subdomain (for example, `backup.acme.com`).
   * Click **Check DNS**. When the CNAME is visible on the public internet, you’ll see it verified.
   * Click **Attach Domain** to finalize. We provision a certificate and light up HTTPS automatically for you. 

#### Test it

* Visit `https://backup.acme.com` in a browser.
* You should land on your branded customer control panel login page (same experience as the tenant’s `*.obcbackup.com` address, just on your domain).

***

### How long does DNS take?

DNS updates are usually quick, but caches honor the record’s **Time To Live (TTL)**. Many providers default to around **300 seconds (five minutes)** for new records; some resolvers may take longer depending on previous cache state. If verification does not pass right away, give it some time and try again.

***

### Troubleshooting

* **Tried to use the root domain (`acme.com`)**\
  Use a **subdomain** instead. A CNAME at the apex conflicts with mandatory records and is not permitted.
* **CNAME points to the wrong place**\
  The target must be your tenant’s **Primary hostname** on `obcbackup.com` (shown on the Branding page). Do not point to an IP address; CNAMEs point to **names**, not addresses. 
* **Still not verifying**\
  Check the record from outside your network. On macOS/Linux you can run:\
  `dig backup.acme.com CNAME` and look for the target you set. (Windows users can use `nslookup`.) If the expected CNAME shows up, try **Check DNS** again.
* **Certificate pending**\
  After DNS verifies, we request a certificate automatically. Give it a moment and refresh.