Got this notification from Azure about migration of Azure front door.

Question

Got this notification from Azure about migration of Azure front door.

Suman Shrestha 85

Migrate to Azure Front Door Standard or Premium before 15 August 2025 to create new profiles and domains

You're receiving this notification because you're associated with one or more Azure subscription(s) that use Azure CDN classic.

On 15 August 2025, CNAME-based Domain Control Validation (DCV) will be deprecated. This is part of an industry-wide deprecation of DCV that will require DigiCert to migrate to a new validation platform to meet multi-perspective issuance corroboration (MPIC) requirements.

As a result of this deprecation:

Starting 15 August 2025, no new domain onboarding or new profile creation will be allowed for Azure CDN classic, and any automation scripts for those actions will begin to fail.
On 15 August 2025, switching to managed certificates on existing domains will no longer be allowed for Azure CDN classic. Existing managed certificates will be renewed automatically before that date, with a validity period of 12 months, ensuring no service impact to existing domains until 1 July 2026.

Required action

If you want to create new domains or profiles, or use Azure managed certificates:

Migrate to either Azure Front Door Standard or Premium before 15 August 2025. Refer to our documentation to learn more about retirement timelines for Azure CDN.

If you're already using Azure managed certificate on existing domains, you can either:

Move to Bring Your Own Certificate (BYOC) before 15 August 2025. Refer to our documentation to learn how to configure HTTPS for your custom domain.
Migrate to Azure Front Door Standard or Premium before 1 July 2026, when managed certificates will expire. Migrate to Azure Front Door Standard or Premium before 15 August 2025 to create new profiles and domains You're receiving this notification because you're associated with one or more Azure subscription(s) that use Azure CDN classic. On 15 August 2025, CNAME-based Domain Control Validation (DCV) will be deprecated. This is part of an industry-wide deprecation of DCV that will require DigiCert to migrate to a new validation platform to meet multi-perspective issuance corroboration (MPIC) requirements. As a result of this deprecation:
- Starting 15 August 2025, no new domain onboarding or new profile creation will be allowed for Azure CDN classic, and any automation scripts for those actions will begin to fail.
- On 15 August 2025, switching to managed certificates on existing domains will no longer be allowed for Azure CDN classic. Existing managed certificates will be renewed automatically before that date, with a validity period of 12 months, ensuring no service impact to existing domains until 1 July 2026.
Required action If you want to create new domains or profiles, or use Azure managed certificates:
- Migrate to either Azure Front Door Standard or Premium before 15 August 2025. Refer to our documentation to learn more about retirement timelines for Azure CDN.
If you're already using Azure managed certificate on existing domains, you can either:
- Move to Bring Your Own Certificate (BYOC) before 15 August 2025. Refer to our documentation to learn how to configure HTTPS for your custom domain.
- Migrate to Azure Front Door Standard or Premium before 1 July 2026, when managed certificates will expire.

Will the current setup work if I don't migrate? Is it mandatory to migrate?

Maya Crawford 1 Reputation point

2025-08-08T18:50:44.9333333+00:00

So just to be clear, we can continue to use Azure CDN for another year and then we will need to migrate to Azure Front Door Standard or Premium? We won't be adding any new domains or profiles.

Accepted answer

0 additional answers

Your answer

Maya Crawford 1 Reputation point

2025-08-08T18:50:44.9333333+00:00

So just to be clear, we can continue to use Azure CDN for another year and then we will need to migrate to Azure Front Door Standard or Premium? We won't be adding any new domains or profiles.

Answer 1

Praveen Bandaru 6,850 Microsoft External Staff Moderator

Hello Suman Shrestha
I understand that you received a notification regarding the Azure Front Door migration and have some questions about it you’ve got a notification related to Azure Front Door migration and some queries about it.
The Azure CDN classic profile is being retired, which is why you are receiving this alert notification.

Starting August 15, 2025, Azure CDN Classic will no longer allow new domain onboarding or the creation of new profiles.

Existing domains that use Azure managed certificates will remain operational. These certificates will be automatically renewed before 15 August 2025, providing a 12-month validity period and ensuring functionality until 1 July 2026.

There will be no immediate service interruptions for current configurations. These certificates will remain valid until 1 July 2026. You can no longer switch to Azure managed certificates for existing domains.

After that date, the CDN classic profile will no longer function, and you will need to migrate to Azure Front Door Standard or Premium.

If you intend to set up new domains or use managed certificates, migrating to Azure Front Door is necessary. There are detailed guides to help with the migration, and an important resource to review is the following link.
About Azure CDN from Microsoft (classic) to Azure Front Door migration

If you are not planning to onboard new domains or profiles, you can continue using the service without interruption, as Microsoft will renew the managed certificates with 12 months validity. However, if you are using a BYOC certificate, you will need to renew it yourself.

Hope the above answer helps! Please let us know do you have any further queries.

Please do not forget to "accept answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Suman Shrestha 85 Reputation points

2025-08-04T22:53:38.1866667+00:00

Hi Praveen,

If the current profile is valid till next July, we will plan to migrate this next year. Will I be able to update the BYOC certificate for it in the coming month if I don't migrate it now?
Praveen Bandaru 6,850 Reputation points Microsoft External Staff Moderator

2025-08-06T12:05:07.26+00:00

Hello Suman Shrestha
If you are using a BYOC certificate on your CDN custom domain before August 15, 2025, please remember to renew your certificate to avoid interruption. You may continue using the CDN classic profile until next July; however, for production environments, migrating earlier is recommended to reduce potential risks.

Hope the above answer helps! Please let us know do you have any further queries.

Please do not forget to "accept answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.
Suman Shrestha 85 Reputation points

2025-08-06T23:02:03.2466667+00:00

Hi Praveen,

The current profile only Contains Endpoints, but no custom domains.

What are the prerequisites for the migration?
Praveen Bandaru 6,850 Reputation points Microsoft External Staff Moderator

2025-08-07T10:53:16.1933333+00:00

Hello Suman ShresthaI

see that your CDN classic profile only has endpoints and no custom domains. You can proceed with the migration process, and it will not affect your environment.

And also, you can follow the below document to do migration CDN classic to front door.

Migrate Azure CDN from Microsoft (classic) to Standard/Premium tier

And also, there are no custom domains involved, DNS changes are not required during the migration process. Once the migration is complete, Azure Front Door will provide a new endpoint (such as *.z01.azurefd.net), and you can update the DNS settings if necessary.

Additionally, if you are using the WAF, please ensure that your AFD SKU supports it. In the standard WAF, only custom rules are supported, while in the premium version, both managed and custom rules are supported.

Alternatively, you can do manually keep your CDN classic profile and first deploy the AFD (Premium/Standard) profile. After migrating all your configurations to the new AFD, route 10% of the traffic through it to check if everything works correctly. If all is well, increase to 50% of the traffic, and if it continues to work properly, route all traffic through the new AFD and monitor its performance. If everything remains stable, you can remove your old CDN classic profile. If you notice any issues, you can revert to your old profile, fix the problems, and then switch back to the new AFD profile once resolved.

Check the below reference documents for migration:

https://learn.microsoft.com/en-us/azure/cdn/tier-migration?toc=%2Fazure%2Ffrontdoor%2Ftoc.json

https://learn.microsoft.com/en-us/azure/cdn/migrate-tier?toc=%2Fazure%2Ffrontdoor%2Ftoc.json

Hope the above answer helps! Please let us know do you have any further queries.

Please do not forget to "accept answer" and “up-vote” wherever the information provided helps you, this can be beneficial to other community members.

Share via

Got this notification from Azure about migration of Azure front door.

0 additional answers

Your answer