[ Web Proxy ]
URL:
Viewing: https://developers.cloudflare.com/dns/zone-setups/conversions/convert-partial-to-full/ [Back]  [Original]

Convert partial setup to full setup Cloudflare DNS docsSkip to content
SearchCtrlKLog in
  1. Home
  2. /DNS
  3. /
  4. /Setup conversions
  5. /Partial to full

Convert partial setup to full setup

Last updated May 5, 2026Copy as MarkdownView as MarkdownAgent setup
Overview1. Prepare Cloudflare SSL/TLS2. Update settings in authoritative DNS3. Convert to full setup4. Activate full setup

If you initially set up a partial domain on Cloudflare, you can later migrate it to a primary setup (also know as full setup).

Subdomain setup

If you also use subdomain setup1, consider the available combinations and whether your zone conversion could have any implications.

Footnotes

  1. Meaning you have one or more subdomains (sub.example.com) added to Cloudflare as their own zone, separate from your apex domain (example.com).

1. Prepare Cloudflare SSL/TLS

In the Cloudflare dashboard, either order an advanced certificate or upload a custom SSL certificate for your website or application.

You should also verify that the status of your SSL certificate is Active.

Note

It is possible to use Universal SSL instead, but you should consider the following:

  • Universal certificates can take at least 15 minutes to be issued.
  • You should make sure to add Cloudflare nameservers to your registrar within 72 hours of the conversion process.
  • Universal SSL only supports first-level subdomains. You can use Advanced certificates with the Total TLS option to automatically issue certificates for any proxied hostname.
  • To minimize downtime, it is recommended having a certificate in place beforehand.

2. Update settings in authoritative DNS

At least 24 hours prior to converting your zone, disable DNSSEC at your authoritative DNS provider.

Note

As a best practice, you should also delete the previous zone activation TXT record at your authoritative DNS provider. To locate this value in the Cloudflare dashboard, go to the DNS Records page and find the Verification TXT Record.

3. Convert to full setup

In the Cloudflare dashboard:

  1. In the Cloudflare dashboard, select your partial zone (CNAME setup) and go to the DNS Settings page.

    Go to Settings ↗
  2. Select Convert to Primary DNS (this will not affect how your traffic is proxied).

  3. Import your records into Cloudflare DNS and verify that they have been configured correctly. Usually, you will want to import unproxied records.

4. Activate full setup

Get your assigned Cloudflare nameservers from the DNS Records page and update your nameservers at your registrar.

Caution

If you are counting on Universal SSL certificates to cover your website or application, make sure to add Cloudflare nameservers to your registrar within 72 hours of the conversion process.

Cloudflare recommends that you also enable DNSSEC from the DNS Settings page and add the DS record to your registrar.

Once all the DNS TTLs expire, all your DNS queries will be answered by the Cloudflare global network.

Start proxying additional hostnames by enabling the proxy status (also known as orange-clouding) for specific DNS records. Previously proxied subdomains will continue to be proxied without any interruption.

PreviousFull to secondaryNextPartial to secondary

Was this helpful?

YesNo
Edit pageReport issue
[]

Web Proxy Viewer  |  New URL  |  Original Page