Description:
This documentation describes the Hosted DKIM feature guide for the account/user. The document includes the steps for activation and using the feature.
To support the Hosted DKIM feature the following conditions should be considered:
Your plan supports the Hosted DKIM feature
Account is active
A domain is added to your account
Note: You will need to add a DKIM NameServer (NS) record to your DNS zone to manage a domain’s DKIM keys within the PowerDMARC system.
Steps for the activation the Hosted DKIM feature:
Go to the Hosted Services>Hosted DKIM
Select your domain
Copy the Host name and value of the NS record and add it to your DNS
Note: DNS record type is NS (see the screenshot below)
Once the record is added to your DNS go back to Hosted DKIM section and click the Validate Hosted DKIM button
Note: To fully propagate the DNS records it can take up to 48 hours
Once the domain validated the pop-up with the record is valid sign is shown and you’ll be redirected to the add selectors page
Hosted DKIM - Domain selectors section
After validating the Hosted DKIM for your domain the Domain selectors section page becomes accessible to you.
Steps for adding a new selector with TXT record type:
Click the Add New button
On the opened modal type the selector name (ex. google )
Add or select already existing sending service (To add a new sender service click the Add Sender Service button, type your service name and save)
Add comments if needed (optional)
Select one of the options TXT(the full DKIM record including tags), CNAME (CNAME value provided by 3rd party services), Public Key(the value of DKIM record coming after p). You can generate the DKIM record value on the PowerDMARC’s generator tools>DKIM record generator section or add a record provided by 3rd party services.
Click the Add Record button
Your key is added!
Adding a new selector with CNAME record type using Mailchimp’s CNAMEs:
(The only difference between a CNAME record type DKIM key is the Record value)
The record value of a CNAME type DKIM key will point to a 3rd party server (Microsoft, Google, Mailchimp), which is the one that will respond with a TXT value for the key.
Mailchimp provides two CNAME records with two selectors.
Note: You need to copy and add to selector field in Hosted DKIM only the DKIM selector values k2 and k3 (see the screenshot above for selector values and screenshot below selector filed on the Hosted DKIM section)
The value of the Points to field should be pasted to the CNAME section while adding a selector on Hosted DKIM. (see the screenshot below)
Adding a new selector with PUBLIC KEY record type:
Note: You must add the value coming after p tag (see the screenshot below)
Type your selector name
Select or create sender service
Add comments if any (optional)
Insert the the generated DKIM record value and click the Add Record
Note: Check the “Only allow domain signing” box only if the TXT record value contains the tag ‘t=s’. This is available only for TXT record keys