DomainKeys Identified Mail (DKIM) is a method of email authentication that enables a sending domain to cryptographically sign outgoing messages, allowing the sending domain to assert responsibility for a message.
LibraCyber ESG can sign outgoing traffic at the gateway. To configure the outgoing DKIM signing, please go to the DKIM / DMARC / ARC page.
Pre-requisites
To correctly setup your own domain DKIM signature verify the following pre-requisites:
- Outgoing email traffic for your domain should route through LibraCyber Email Security
- You need full control and knowledge about how to modify your public DNS zone to create needed TXT record
Configuration
First of all you need to click the New button in the toolbar and open the configuration dialog as the image below.
All parameters will be pre-compiled, so you should check them and click on Save.
As you can see the DNS record value has automatically been generated by the appliance. The private key is now stored on your appliance and the public key is inside the DNS record value field. Now you have to copy this value and publish it on your DNS as a TXT record. The name of the TXT record will be the Selector field value.
Test
When the DNS TXT record is published and the changes has been propagated you can perform a test from MXToolbox: https://mxtoolbox.com/dkim.aspx.
Enabling
The DKIM signing is correctly configured, so you can enable the DKIM module by clicking on the Enable button at the top of the page.
Note: bear in mind that there is a performance overhead with the cryptographic operations and DNS lookup of public keys.