User Guide

20-7

AsyncOS 9.1.2 for Cisco Email Security Appliances User Guide

Chapter 20 Email Authentication

Configuring DomainKeys and DKIM Signing

profile. For example, you would configure a return address of MAILER-DAEMON@example.com for

the bounce return address, and add MAILER-DAEMON@example.com as a profile user in the domain

profile.

Configuring DomainKeys/DKIM Signing (GUI)

Procedure

Step 1 Create a new or import an existing private key. For information on creating or importing signing keys,

see Signing Keys, page 20-3.

Step 2 Create a domain profile and associate the key with the domain profile. For information on creating a

domain profile, see Domain Profiles, page 20-5.

Step 3 Create the DNS text record. For information about creating the DNS text record, see Generating a DNS

Text Record, page 20-13.

Step 4 If you have not already done so, enable DomainKeys/DKIM signing on a mail flow policy for outbound

mail (see Enabling Signing for Outgoing Mail, page 20-6).

Step 5 Optionally, enable DomainKeys/DKIM signing for bounced and delay messages. For information about

enabling signing for bounce and delay messages, see Enabling Signing for Bounce and Delay Messages,

page 20-6.

Step 6 Send email. Mail sent from a domain that matches a domain profile will be DomainKeys/DKIM signed.

In addition, bounce or delay messages will be signed if you configured signing for bounce and delay

messages.

Note If you create both a DomainKey and DKIM profile (and enable signing on a mail flow policy), AsyncOS

signs outgoing messages with both a DomainKeys and DKIM signature.