By default, we require Preview Deployment Suffix domains to use Vercel nameservers to issue TLS certificates (and renew them automatically).
Workaround
Step 1 - Create NS records
If you can't change your domain's nameservers (e.g., your DNS provider doesn't allow it), you can create NS records on _acme-challenge subdomain instead as a secondary option.
For example, if you add preview.acme.com as your Preview Deployment Suffix domain, you can create NS records listed below:
Record Type | Name | Value |
|---|---|---|
|
|
|
|
|
|
This can be used to delegate the _acme-challenge.preview subdomain to Vercel nameservers, and other subdomains continue to use the current DNS provider's name servers as before.
Please note: Using this method may prevent other hosting providers from creating certificates for their service and should only be used if you cannot change your name servers.
Step 2 - Enable Vercel DNS
Go to the Domains page and select the Apex domain. Then, click the Enable Vercel DNS button to activate the Vercel DNS.
Step 3 - Create a wildcard CNAME record
Suppose you're adding preview.acme.com as your Preview Deployment Suffix domain.
Since you're not using Vercel nameservers, you must also set up a wildcard CNAME record in your current DNS provider so that any DNS queries against *.preview.acme.com subdomains can correctly resolve to Vercel IP addresses.
Record Type | Name | Value |
|---|---|---|
|
|
|
Please refer to your DNS provider's documentation for how to add a wildcard DNS record.