Trust center

Custom domain

Serve the trust page from your own domain with DNS verification and automatic SSL.

RolesViewerEditorAdminRoute/trust-centerShown toCompliance organizations

What it is

A custom domain puts the trust page on an address you own, such as trust.example.com, with a certificate Noru provisions for you. It is required before a trust page can be published. Setup has three parts: name the domain, prove you control it with a TXT record, and point it at Noru with a CNAME once published. The Custom domain section reports each state as you go.

Where to find it

Trust CenterBuilderAdvanced
The Custom domain section on the Advanced tab with the domain field and DNS instructionsThe Custom domain section on the Advanced tab with the domain field and DNS instructions
The section explains that publishing activates the certificate.

Key actions

Configuring, verifying, and removing a domain need the editor or admin role. You will also need access to your DNS provider.

Add the domain

On Advanced, under Custom domain, enter the hostname in Domain name (the placeholder shows trust.example.com). Use a subdomain you do not already serve.
Click Configure domain. The toast reads "Domain added. Add the TXT record below to prove you control it." (or, if verification is not needed for this domain, "Custom domain configured! You can now publish your trust page.").

Prove you control it

Read the Prove you control this domain panel. It shows a TXT record: the name to create and the token to put in it.
Create that TXT record at your DNS provider.
Click Verify ownership. Success reads "Domain ownership verified. You can now publish."; until the record propagates you get "TXT record not found yet. Check the record and try again in a few minutes."

The domain stays pending, and the trust page cannot be published on it, until the record is found. You can remove the TXT record after verification. If the same hostname is already in use elsewhere on Noru's infrastructure, a second panel, Ownership verification required, shows an additional TXT record to add as well.

Point the domain at Noru

Publish the trust page from the builder header. The section switches to DNS instructions.
At your DNS provider, create a CNAME for the subdomain pointing to the target shown in the panel (there is a copy button).
Click Refresh status. When DNS and the certificate are in place the panel reads Domain verified & SSL active.

Noru requests and renews the certificate for you. Five to fifteen minutes is typical after the CNAME resolves; a long TTL on an old record can stretch that.

Remove the domain

Remove domain opens the "Remove custom domain" dialog. Confirming detaches the hostname ("Custom domain removed successfully"); a published page becomes unreachable at that address until you configure another and publish again.

Statuses and fields

PanelMeaning
Prove you control this domainTXT verification pending; publishing is blocked
Ready to PublishOwnership verified; publish to activate the certificate
DNS instructionsPublished, CNAME not yet seen
Domain verified & SSL activeLive; certificate issued
Domain configuration error detectedThe CNAME points elsewhere or the certificate could not be issued
Ownership verification requiredThe hostname is already in use elsewhere on Noru's infrastructure; an additional TXT record is needed
Reserved Domain DetectedYou entered a Noru hostname; choose your own

Tips and gotchas

Add the TXT record and the CNAME in the same DNS session. The TXT is checked before publishing and the CNAME after, but nothing stops you creating both up front.

A hostname can be verified by only one organization. If a colleague's test workspace verified trust.example.com first, remove it there before adding it here.

Apex domains (example.com without a subdomain) need an ALIAS or ANAME record at providers that do not allow a CNAME at the root. A subdomain avoids the question.

What Noru does not do

Noru does not edit your DNS, register domains, or serve the trust page on a Noru-owned hostname in place of yours. It does not renew a certificate for a domain whose CNAME has been removed, and verification proves control at the moment you clicked Verify ownership, not continuously.

Last updated on