Introduction

The Domain Management settings serve as a central location where a Superadmin can:

• Set up email senders, used primarily for platform notifications and self-registration purposes, either using DKIM or SMTP
• Manage custom domains for the platform
• Manage secondary domains used for extended enterprise clients
• Configure SSL certificates to protect HTTP traffic

Functions of the Domain Management feature create a unified management area, replacing the HTTPS and Custom Domain app functionalities.

This article addresses the most commonly asked questions and provides the necessary answers.

Questions and answers

General questions

Tip: For more information about the Domain Management feature, please see Domain Management.

What happens on the day the new Domain Management feature is released? Do I have to do something?

No action is necessary for administrators. All migration for the settings previously set on the platform will be managed by Docebo.

I'm using Cloudflare, will it now be supported with the new Domain Management feature?

The certificate issued by Cloudflare may work but we cannot guarantee support or provide troubleshooting for their configuration. Docebo recommends that you contact your Cloudflare representative for any troubleshooting.

DNS related questions

Tip: For more information about DNS requirements, please see Domain Management: DNS record configuration requirements.

Can I configure DNS from the platform?

No, DNS cannot be configured directly from the platform. To make DNS configuration changes we recommend contacting your IT department. On the Docebo Learn platform you can only check or validate that the settings you have configured with your DNS provider correspond to those required by the platform itself.

Please note: Any changes in your DNS configuration may take up to 24 hours to propagate.

SSL certificate related questions

Tip: For more information about SSL Certificates, please see Domain Management: Managing self-supplied SSL certificates.

How can I check the expiration of my SSL certificates?

You can check the expiration of your SSL certificates in the SSL certificates tab of the Domain Management area. In the Valid To column you can check the status of each certificate.

How are renewals of expiring SSL certificates managed, if you have chosen and take advantage of the managed by the platform option?

The platform takes care of the automatic renewal, no action is necessary for administrators.

Attention: Docebo-managed certificates are managed in partnership with an external service that Docebo does not control (Let's Encrypt - link opens in new tab), therefore Docebo cannot guarantee its operation with the same standards with which the Docebo Learn platform operates. As such, the certificate creation functionality managed by Docebo should be treated as an interim step.

In order to ensure maximum security and have total control over your certificates, Docebo strongly recommends that you procure the necessary digital certificates through your trusted partner and have your IT or security team assist you in doing so.

How or where can I get CSR files now?

With the new Domain Management, this step is no longer necessary. If you choose to have the SSL certificate managed by the platform, we will take care of the entire process. Alternatively, you always have the possibility to upload a custom SSL certificate but in this case we recommend you contact your IT manager who will take care of:

• Creating a CSR to submit to a Certificate Authority for validation
• Following the standard process to create an SSL certificate

I have a custom SSL certificate previously uploaded and associated with a domain that is now about to expire and I have the new renewed certificate. If I add the renewed certificate, do I have to delete the previous certificate and upload the new one? If so, will the old certificate remain active until replaced?

It is not important that you remove the old certificate, it is important to upload the new one and assign it correctly to your primary or secondary domain that will use it.

Please note: It is the moment you assign the certificate to the domain that ensures both the switch and that it is served correctly, not the moment you upload the certificate.

What format should the SSL certificate files be in?

The files must be in PEM format with a .pem extension, which means they can be opened in any plain text editor such as Notepad (for Windows) and TextEdit (for MacOS).

I received an error message while saving the files I uploaded, what could this be due to?

Run a check on the uploaded files, check that they are in PEM format with a .pem extension.

The certificate file must include only the text between the following tags (include the tags in the text file):
From: -----BEGIN CERTIFICATE-----
To: -----END CERTIFICATE-----

Is the intermediate CA file necessary?

No, it depends on how your IT department generated your final certificate. Docebo recommends that you contact your IT manager who managed the creation of your custom SSL certificate for further information.

Email sender related questions

Tip: For more information about email domains, please see Domain Management: Configuring email domains.

I don't have any email senders configured, do I need to configure some?

Yes, it is mandatory to do so. Furthermore, it is advisable to add all the domains to which the senders of your notifications belong. During configuration, for each of them you will get the data necessary to set the SPF and DKIM records appropriately. For more information please see Domain Management: Configuring email domains.