# Using Custom Domain Names

When a SecretVM is created, a random fully qualified domain name (FQDN) is created for it. A subdomain of one of the domains that belongs to the Portal, such as `secretvm.com`, is used, so the resulting domain name would look something like this: `tomato-dolphin.secretvm.com`

It is also possible to launch SecretVM with a custom domain name under a domain managed by the develoloper.

Do do that, it is required to specify the domain name in Custom Domain box:

<figure><img src="https://1849345700-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FgF1LuzRcRVxJ2tTkh299%2Fuploads%2FqbKSj6XlacGaB8Wh8lm6%2Fimage.png?alt=media&#x26;token=b76e7806-1f08-470b-b703-f50bd2d90fe0" alt=""><figcaption></figcaption></figure>

After Launch Your SecretVM is clicked, the machine will be created, but not yet launched.

Go to the Network tab to find the IP address that was assigned to the new machine, and then configure your DNS to point the chosen FQDN to that IP.

<figure><img src="https://1849345700-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FgF1LuzRcRVxJ2tTkh299%2Fuploads%2FiepBv6nHaS11IEWAVYA3%2Fimage.png?alt=media&#x26;token=99ea7cab-fda1-4437-be24-c1e50409bd79" alt=""><figcaption></figcaption></figure>

Once the DNS records are created and sufficiently propagated, launch the SecretVM.

#### CNAME record for ZeroSSL Certificate

After the VM starts, you will need to create an additional DNS record under your domain - this is required by ZeroSSL to validate ownership of the domain before issuing a new DNS certificate.

Go to the Logs tab of the machine, and search for "CNAME Challenge":<br>

<figure><img src="https://1849345700-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FgF1LuzRcRVxJ2tTkh299%2Fuploads%2FAKglvYc7oK2mzClU3gWc%2Fimage.png?alt=media&#x26;token=a8957908-d01b-4d68-a7ad-0b8707552148" alt=""><figcaption></figcaption></figure>

Copy the <mark style="color:red;">name</mark> of the record and the expected <mark style="color:green;">value</mark>, and create a respective record under your DNS. ZeroSSL script will continue retrying multiple times until it can read the expected record.

Once the script identifies the required DNS record, it will generate the SSL certificate and continue with the startup routine.

&#x20;