By default, we require Preview Deployment Suffix domains to use Vercel nameservers to issue TLS certificates (and renew them automatically).
If you can't change your domain's nameservers (e.g., your DNS provider doesn't allow it), you can create
NS records on
_acme-challenge subdomain instead as a secondary option.
For example, if you add
preview.acme.com as your Preview Deployment Suffix domain, you can create NS records listed below:
This can be used to delegate the
_acme-challenge.preview subdomain to Vercel nameservers, and other subdomains continue to use the current DNS provider's name servers as before.
Please note: Using this method may prevent other hosting providers from creating certificates for their service and should only be used if you cannot change your name servers.
Go to the
Domains page and select the Apex domain. Then, click the
Enable Vercel DNS button to activate the Vercel DNS.
Suppose you're adding
preview.acme.com as your Preview Deployment Suffix domain.
Since you're not using Vercel nameservers, you must also set up a wildcard
CNAME record in your current DNS provider so that any DNS queries against
*.preview.acme.com subdomains can correctly resolve to Vercel IP addresses.
Please refer to your DNS provider's documentation for how to add a wildcard DNS record.