Configure a custom domain name - Drive and Photo Service

Notes

To create and access more than 500 shares daily or to allow APK and IPA file downloads from external shares, you must configure both an enterprise domain name and a data access domain name.
If you encounter any issues during use, contact us.

Prerequisites

CDE is activated and a CDE instance is purchased. For more information, see Activate and purchase CDE.
You have an account assigned as a super administrator or drive administrator in CDE.
You have registered a domain name.
If your service is deployed in the Chinese mainland region, ensure that you have completed ICP filing for the domain name.
You have an SSL certificate. If you do not have one, you can purchase an SSL certificate from Certificate Management Service. For more information, see Purchase a commercial certificate and Apply for a certificate.

Important

If you completed the ICP filing through a provider other than Alibaba Cloud, the system might fail to retrieve the filing status. This can cause domain name binding or access to fail.

Use cases

Enterprise domain name

An enterprise domain name is a website access domain that is easy to remember and reflects your corporate identity.

After you configure an enterprise domain name, users can access the enterprise drive login page by entering the custom domain name, such as pan.xxx.com/index, in the address bar of their browser.

Data access domain name

A data access domain name is used to access file data or for transcoding and playback.

File transfer

This domain name is primarily used for file transfers within the drive and through external links, such as file uploads and downloads.

When you download a file in a browser, the source address is the data access domain name. For example: https://pdsfile***.com.

Value-added service

This domain name is primarily used for value-added services such as audio and video transcoding and playback, including online video streaming and packaged downloads.

Procedure

Step 1: Configure DNS records

Obtain the DNS record values.

Important
Follow the instructions for your domain name type to obtain the required DNS record values.
Enterprise domain name

To obtain the DNS record value for an enterprise domain name, follow these steps:
1. Log on to CDE and go to the admin console.
2. In the left-side navigation pane, choose Enterprise Settings > Standard Customization.
3. In the Enterprise Domain Name section, copy the value of Default Domain. For example: example.apps.aliyunpds.com.
Data access domain name

To obtain the DNS record value for a data access domain name, follow these steps:
1. Log on to CDE and go to the admin console.
2. In the left-side navigation pane, choose Enterprise Settings > Standard Customization > More Configuration > Data Access Domain Name.
3. In the Data Access section, copy the value of Default Domain.
  Important
  
  For each Service Type, you must configure two CNAME records: one to resolve the custom domain name and another to verify DNS domain ownership. For more information, see Example of DNS binding for a data access domain name.
  
  www.example.com is your custom data access domain name.
  
  example2.data.aliyunpds.com is the Default Domain.
  1. To resolve the custom data access domain name:
    
    Hostname: www.example.com
    
    Record value: example2.data.aliyunpds.com
  2. To verify DNS domain ownership:
    
    Hostname: _dnsauth.www.example.com
    
    Record value: _dnsauth.www.example.com.example2.data.aliyunpds.com
  3. Obtain the Default Domain for file transfer or value-added service as needed.
    
    On the data access domain name configuration page, the File Transfer and Value-Added Service sections each display a default domain name in the format xxx.data.aliyunfile.com. Copy the default domain name from the corresponding section.

Follow the steps provided by your domain name provider to point the domain name to Drive and Photo Service (PDS).

Domains on Alibaba Cloud

To map a domain name registered with Alibaba Cloud to Drive and Photo Service (PDS), follow these steps:

Log in to the Alibaba Cloud DNS console.
In the list of authoritative domain names, find the target domain name and click DNS Settings in the Actions column.
Click Add Record and enter the DNS information.

Parameter	Description	Example value
Record type	Select CNAME as the record type.	CNAME
Hostname	Enter the hostname based on your requirements. This determines the domain name that you use to access Drive and Photo Service (PDS).	www
DNS request source	The DNS line for domain resolution. Selecting Default is recommended, as the system automatically chooses the optimal line.	Default
Record value	Enter the default domain name for your enterprise.	example.apps.aliyunfile.com
TTL	The update interval for the domain name record. The minimum value is 1 second. Note The TTL setting takes effect after a short delay.	10 minutes

Domains outside Alibaba Cloud

On your domain name provider's DNS platform, add a CNAME record using the parameters in the following table.

Parameter	Description	Example value
Record type	Select CNAME as the record type.	CNAME
Hostname	Enter the hostname based on your requirements. This determines the domain name that you use to access Drive and Photo Service (PDS).	www
DNS request source	The DNS line for domain resolution. Selecting Default is recommended, as the system automatically chooses the optimal line.	Default
Record value	Enter the default domain name for your enterprise.	example.apps.aliyunfile.com
TTL	The update interval for the domain name record. The minimum value is 1 second. Note The TTL setting takes effect after a short delay.	10 minutes

Verify that the DNS resolution has taken effect.

After you bind the custom domain name, you can use the Alibaba Cloud Network Probing Tool to check the CNAME resolution result.

The CNAME record for your custom domain name is active if the DNS resolution result points to the public access domain name of Drive and Photo Service (PDS).

Select the DNS tab, enter your custom domain name, and click Detect Now. In the Resolution Result column of the detection results, verify that the returned CNAME record points to the public access domain name of Drive and Photo Service (PDS).

Step 2: Configure the custom domain name

Important

Before configuring the custom domain name, ensure that DNS resolution has taken effect.
Before you configure the custom domain name, download an SSL certificate of the Other service type. This provides two files: example.key and example.pem.

Log on to CDE and go to the admin console.
In the left-side navigation pane, choose Enterprise Settings > Standard Customization.

Click Configure Domain Name.

Parameter	Description	Example value
Custom domain name	The domain name for which you configured DNS records.	www.example.com
Certificate name	The name of the certificate.	cert_xxxxx
Certificate content	The full content of the example.pem file of the SSL certificate. Note If the certificate is issued by an intermediate certificate authority, the certificate content must be a combination of your downloaded certificate and the intermediate certificate.	-----BEGIN CERTIFICATE----- example -----END CERTIFICATE-----
Certificate private key	The full content of the example.key file of the SSL certificate.	-----BEGIN RSA PRIVATE KEY----- example -----END RSA PRIVATE KEY-----

Click Set Now to complete the Custom Domain Names configuration.

Appendix

DNS binding example

Note

The domain names in this example are placeholders. Replace them with your actual domain names during configuration.

Assume your domain name is aliyundoc.com.

You want to set the custom domain name for file transfer to data.aliyundoc.com.
The default domain name for file transfer is 5b3ede2bf7464bcd8a76eed52975****.data.aliyunpds.com.

Example of configuring a custom data access domain name.

Configure DNS resolution:

Parameter	Example value
Record type	CNAME
Hostname	data
DNS request source	Default
Record value	`5b3ede2bf7464bcd8a76eed52975****.data.aliyunpds.com`
TTL	10 minutes

Resolution example:

Add a CNAME record. For Record Type, select CNAME - Point a domain name to another domain name. Set Hostname to data. For DNS Request Source, select Default. For Record Value, enter the CNAME address assigned by CDE, such as xxx.data.aliyunfile.com. Set TTL to 10 minutes (recommended).

Example of verifying DNS domain ownership.

Configure DNS resolution:

Parameter	Example value
Record type	CNAME
Hostname	_dnsauth.data
DNS request source	Default
Record value	`_dnsauth.data.aliyundoc.com.5b3ede2bf7464bcd8a76eed52975****.data.aliyunpds.com`
TTL	10 minutes

Resolution example:

For Record Type, select CNAME - Point a domain name to another domain name. Set Hostname to _dnsauth.data. For DNS Request Source, select Default. For Record Value, enter the CNAME verification value from Certificate Management Service, such as _dnsauth.data.aliyundoc.com.5b3ede2bf7464bcd8a76eed52975.... Set TTL to 10 minutes (recommended).

FAQ

Default domain availability

Yes, you can.

Unbinding a custom domain

If you no longer need a custom domain name, follow these steps to unbind it.

Unbind the custom domain name.
1. Log on to CDE and go to the admin console.
2. In the left-side navigation pane, choose Enterprise Settings > Standard Customization.
3. On the Standard Customization page, in the Enterprise Domain Name section, click Delete Configuration to delete the enterprise domain name.
4. If you have configured a Data Access Domain Name, on the current page, select More Configuration > Delete Configuration to delete the Data Access domain name.
Delete the DNS record.

After you unbind the custom domain name, you must manually delete the CNAME record. For more information, see Delete a record.

Certificate addition error

If you encounter this error while configuring a domain name, check whether your certificate is correctly configured or has expired.

Certificate Content: The certificate content must be the full content of the file that starts with "-----BEGIN CERTIFICATE-----".

Certificate Private Key: The private key must be the full content of the file that starts with "-----BEGIN RSA PRIVATE KEY-----".

Certificate private key: The entire configuration beginning with -----BEGIN RSA PRIVATE KEY-----.

Domain propagation delay

DNS changes may take some time to propagate. Wait for about 10 minutes and try again.