Hi Ashley — short answer: no, you don't need to purchase an SSL certificate
if you've enabled CDN on your Power Pages site, and you also don't need to
buy Azure Front Door Standard or Premium separately. Here's why this gets
confusing.
Step 1 — When you enable CDN on your Power Pages site, Power Pages
provisions Azure Front Door behind the scenes as part of the CDN
capability. You don't license or pay for AFD separately — it's bundled
into the CDN feature.
Step 2 — Because AFD is in the path, the TLS certificate for your custom
domain is issued and managed by Microsoft automatically. It's free,
valid for 6 months, and auto-renewed 45 days before expiry. You never
have to buy, upload, or rotate it yourself.
Step 3 — The Azure Front Door docs you linked are for customers who are
deploying AFD as a standalone service in their own subscription. Those
steps don't apply to your scenario — Power Pages handles all of that
for you when CDN is on.
Where you still WOULD need to buy your own SSL cert:
— If CDN is not enabled on the site, you fall back to the "bring your
own certificate" path (Power Platform admin centre → Sites → your
site → Custom Domain Names → upload .pfx).
What to do now:
— Go to Power Platform admin centre → Sites → pick your site → Site
Details → enable "Content Delivery Network".
— Then add the custom domain. Microsoft will issue and bind the
TLS cert automatically within a few minutes.
Reference: learn.microsoft.com/en-us/power-pages/configure/configure-cdn
Hope this clears it up!
