Validation issue with Azure DNS (dns-01)

[ghost]

Issue description

When using Azure DNS (dns-01) for a certificate validation of abc.xyz.de I get the following error:
[EROR] Error preparing for challenge answer Microsoft.Rest.Azure.CloudException: Can not perform requested operation on nested resource. Parent resource 'xyz.de' not found.

Current Setup

Certificate should be issued for subdomain: abc.xyz.de
Subdomain (located at my hoster): abc.xyz.de --> points with an NS-entry to Azure DNS
(so the Azure DNS is only responsible for this subdomain, for xyz.de I have an other DNS)

I followed these instructions: https://github.com/PKISharp/win-acme/wiki/Azure-DNS-validation

Thanks a lot in advance!

[WouterTinus]

The code assumes that you are managing the registrable domain, e.g. xyz.de via Azure. It doesn't support the case where you're only managing the subdomain. I think your only workaround is to manage the DNS through Powershell.

https://github.com/PKISharp/win-acme/wiki/Validation-plugins#script

[ghost]

Thanks for the fast reply! Yes that's exactly my situation and problem.
Your advice to manage the DNS via PowerShell was great. Azure offers commands to update DNS entries (in this example adding the TXT record for validation) via PowerShell scripts:

Example 8 (Create a RecordSet of type TXT):
https://docs.microsoft.com/en-us/powershell/module/azurerm.dns/New-AzureRmDnsRecordSet?view=azurermps-6.9.0

[lu2s]

Hi, basically in this topic everything is explained but I have the same situation and I think that such scenario (that only subdomain is in Azure e.g the one related to Azure hosted resources) is very common. Is it possible to make a change request suggestion to add the option to manually select the scope of validation? Custom PS is acceptable but the best would be to have this functionality directly.

[WouterTinus]

I've ported the logic to figure out the correct zone over from the Amazon Route53 plugin. It seems to work fine after some preliminary testing. Would you mind to try this build?

https://ci.appveyor.com/project/WouterTinus/win-acme-s8t9q/builds/26838080/artifacts

[WouterTinus]

Released in 2.0.10