# Ensure Vercel domain DNS records are properly configured

- Source: https://support.icompaas.com/support/solutions/articles/a_1790262004108662-ensure-vercel-domain-dns-records-are-properly-configured
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Vercel cloud](https://support.icompaas.com/support/solutions/c_1790103019086234) › [Vercel checks](https://support.icompaas.com/support/solutions/folders/f_1790103034130491)
- Last updated: 2026-09-24
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Description**

Ensure every domain on the team's projects has DNS records that point correctly to Vercel, using the exact A or CNAME values shown in the project's Domains settings, or Vercel's nameservers. Domains should show Valid Configuration, and old or conflicting DNS records should be removed.

**Rationale**

Wrong or outdated DNS records can send users to an old server, cause outages, or block SSL certificate creation. Dangling records that point to services no longer in use can also be taken over by attackers. Keeping DNS records correct makes sure users always reach the right deployment securely.

**Impact**

-   Domains serve the correct project
    
-   Allows SSL certificates to be issued and renewed
    
-   Removes dangling records that could be taken over
    

**Default Value**

When a domain is added, Vercel shows the required A or CNAME records. The domain shows Invalid Configuration until the DNS records are set correctly.

**Pre-Requisites**

-   Team Owner or Member role, or Project Administrator
    
-   Access to the domain's DNS provider
    

**Test Plan**

1.  Sign in to Vercel at [https://vercel.com](https://vercel.com/).
    
2.  Select your team from the team switcher.
    
3.  Select the project from the dashboard.
    
4.  Open Settings in the sidebar and select Domains.
    
5.  Check that each domain shows Valid Configuration.
    
6.  Optionally, run dig <domain> in a terminal to confirm the records match the values Vercel shows.
    
7.  If any domain shows Invalid Configuration, follow the implementation steps.
    

**Implementation Steps**

1.  Sign in to Vercel at [https://vercel.com](https://vercel.com/).
    
2.  Select your team from the team switcher.
    
3.  Select the project from the dashboard.
    
4.  Open Settings in the sidebar and select Domains.
    
5.  Open the domain showing Invalid Configuration and note the required A or CNAME value.
    
6.  Update the record at your DNS provider and remove any old or conflicting records.
    
7.  Return to Domains, refresh the domain status, and confirm Valid Configuration.
    

**Backout Plan**

1.  Restore the previous DNS records at your DNS provider.
    

**Reference**

-   [https://vercel.com/docs/domains/troubleshooting](https://vercel.com/docs/domains/troubleshooting)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.