How To Set Up Dkim For Office 365
In the previous article, we had a look at how to configure the SPF tape for Office 365. An excellent way to protect both senders and recipients from phishing mail is to configure a DKIM tape for Function 365. In this article, we will look at how to configure and enable DKIM tape for Office 365.
Tabular array of contents
- What is DomainKeys Identified Mail (DKIM)?
- Bank check Office 365 DKIM status
- Part 365 DKIM records case
- Go Office 365 DKIM selector with PowerShell
- Add together Office 365 DKIM CNAME records to domain's registrar
- Enable Office 365 DKIM
- DKIM record cheque
- No DKIM Record found
- Determination
What is DomainKeys Identified Postal service (DKIM)?
DomainKeys Identified Mail (DKIM) is an authentication process that tin can aid protect both senders and recipients from forged and phishing email. Add together DKIM signatures to your domains, and so recipients know that electronic mail messages really came from users in your arrangement and weren't modified after they were sent.
Check Role 365 DKIM condition
Sign in to Microsoft 365 security center. Click on Policies & rules.
Click on Threat Policies.
Click on DKIM.
Some other option is to become straight to the link https://security.microsoft.com/dkimv2.
Click on the domain in the list view. In this example, the domain exoip.com.
Click on Create DKIM keys to enable DKIM.
Annotation: DKIM is by default disabled for every domain y'all add in Office 365. Microsoft can't automatically enable this as information technology relies on certain DNS records added to the domain'southward registrar.
A message volition show that it tin can't enable DKIM because the CNAME record does not be for this config. That'due south correct because we need to add a couple of CNAMES in the domain's registrar. Later on that, we will return to this folio and enable DKIM.
Click Copy.
Office 365 DKIM records case
An case of how the DKIM records look like for the domain exoip.com:
selector1._domainkey CNAME selector1-exoip-com._domainkey.exoip365.onmicrosoft.com selector2._domainkey CNAME selector2-exoip-com._domainkey.exoip365.onmicrosoft.com If you want to add more than one domain, change the domain and tenant. Everything else looks the aforementioned.
Go Office 365 DKIM selector with PowerShell
Run PowerShell as ambassador and Connect to Exchange Online PowerShell.
PS C:\> Connect-ExchangeOnline -UserPrincipalName admin@exoip365.onmicrosoft.com Run the cmdlet Get-DkimSigningConfig including the domain.
PS C:\> Become-DkimSigningConfig -Identity exoip.com | fl Selector1CNAME,Selector2CNAME Selector1CNAME : selector1-exoip-com._domainkey.exoip365.onmicrosoft.com Selector2CNAME : selector2-exoip-com._domainkey.exoip365.onmicrosoft.com Add Function 365 DKIM CNAME records to domain's registrar
Go to the domain's registrar. Add the two CNAME records.
Note: Pay close attending as some registrars desire yous to add together a dot at the end of the value, and others don't. You can verify by checking other records and see if they have a dot at the end of their value. If yous are non sure, contact your domain'southward registrar.
In our example, a dot needs to be added at the end of the value. It will look like below.
Name TTL Type Value ---- --- ---- ----- selector1._domainkey 5 min. CNAME selector1-exoip-com._domainkey.exoip365.onmicrosoft.com. selector2._domainkey 5 min. CNAME selector2-exoip-com._domainkey.exoip365.onmicrosoft.com. 
We have to wait xv minutes to an hour before changes accept result.
Enable Part 365 DKIM
Get back to the Microsoft 365 security middle and Enable DKIM for Role 365.
DKIM tape check
Bank check DKIM record with MxToolbox. Fill in the domain name and selector1. Click DKIM Lookup.
The DKIM selector1 record is published.
Change the lookup field to selector2 and click on DKIM Lookup. The DKIM selector2 record is published.
We did successfully configure the DKIM tape for the domain in Function 365.
No DKIM Tape found
Suppose you get a effect that shows No DKIM Tape establish.
Go dorsum to the Microsoft 365 security center and click on Rotate DKIM keys.
Look a couple of minutes and cheque over again in MxToolbox. It volition bear witness the result DKIM record establish.
In the next article, we will change Users UPN with PowerShell.
Decision
You learned how to configure DKIM record for Office 365. Sign in to the Microsoft 365 security portal and go to the DKIM policy. Enabling DKIM for the domain will not work without start creating the CNAME records in the domain'southward registrar.
Sign in to the domain's registrar and publish the CNAME records selector1 and selector2. After that, wait for 15 minutes earlier enabling DKIM in Microsoft 365 security portal. You can always utilise MxToolbox to perform a DKIM record test against the domain proper name and selector for a valid published DKIM cardinal record.
Did you relish this article? You may also similar Add second domain to Exchange Server. Don't forget to follow us and share this article.
Source: https://www.alitajran.com/configure-dkim-record-for-office-365/
0 Response to "How To Set Up Dkim For Office 365"
Post a Comment