Exchange 2019 DKIM authentication

Question

Exchange 2019 DKIM authentication

Susan Dodds 361

Exchange 2019 on premise. No edge server.

Google keeps saying SPF/DKIM authorization fails . I have a SPF record setup.

Google says I need either a SPF or DKIM setup but apparently SPF isn't enough.

Bounced messages from google/gmail are inconsistent. Not sure what triggers them.

Can I setup DKIM without a 3rd party application?

Is there a different setting I can use that will prevent this bounce back?

Jarvis Sun-MSFT 10,266 Reputation points Microsoft External Staff

2024-01-02T01:15:42.0766667+00:00

@Susan Dodds

I wanted to follow up and know if the below responses from Andy helped in answering your query. If it did, please do not forget to accept the appropriate response as Answer so that others in the community facing similar issues can easily find the solution.

1 answer

Your answer

Jarvis Sun-MSFT 10,266 Reputation points Microsoft External Staff

2024-01-02T01:15:42.0766667+00:00

@Susan Dodds

I wanted to follow up and know if the below responses from Andy helped in answering your query. If it did, please do not forget to accept the appropriate response as Answer so that others in the community facing similar issues can easily find the solution.

Answer 1

Andy David - MVP 159.7K MVP Volunteer Moderator

Gmail wont accept messages for personal accounts if the sending server isnt using DKIM.

You will need to look at third party solutions really

or perhaps:

https://github.com/Pro/dkim-exchange

https://www.reddit.com/r/exchangeserver/comments/v5udzr/dkim_creation_exchange_2019/

Or send the messages outbound through a SMTP gateway that leverages DKIM

Susan Dodds 361 Reputation points

2023-12-29T18:35:39.78+00:00

Please provide exact instructions and anything I need to look out for
Andy David - MVP 159.7K Reputation points MVP Volunteer Moderator

2023-12-29T20:51:47.03+00:00

What instructions are you looking for?
Susan Dodds 361 Reputation points

2023-12-29T20:55:52.1333333+00:00

Installing the software and configuration. Any complications that could arise.
Andy David - MVP 159.7K Reputation points MVP Volunteer Moderator

2023-12-29T21:57:47.9766667+00:00

Sorry, I wouldnt know. Personally, I wouldnt install any DKIM solution for on-prem Exchange. Rather I would use a 3rd party solution i.e. a cloud gateway.If you send all messages out through 365 for example:

https://learn.microsoft.com/en-us/microsoft-365/security/office-365-security/email-authentication-dkim-configure?view=o365-worldwide
Susan Dodds 361 Reputation points

2023-12-29T23:29:29.9166667+00:00

Is defender portal available without a 365 license?
Susan Dodds 361 Reputation points

2023-12-30T02:57:19.1233333+00:00

In my admin microsoft account, I have added the domain of my email server and added the txt record microsoft wanted to my DNS provider.

When I go to create a DKIM key, I get the following message:

ExE71684|Microsoft.Exchange.Configuration.ObjectModel.ProvisioningValidationException|The following error occurred during validation in agent 'Substrate Only Agent': 'Organization "***.PROD.OUTLOOK.COM/Microsoft Exchange Hosted Organizations/.onmicrosoft.com" is not licensed for Exchange email functionality. Cmdlet usage is restricted.'

I do not have any 365 licenses.
Andy David - MVP 159.7K Reputation points MVP Volunteer Moderator

2023-12-30T15:15:18.5233333+00:00
You will need licenses yes:

https://blog.admindroid.com/how-to-enable-dkim-in-microsoft-365/

Enable DKIM in your Microsoft 365 with the following add-on licenses.

Microsoft 365 Defender for Office 365 Plan 1 and Plan 2

Microsoft 365 Defender

However, these licenses are available by default in basic subscriptions such as Microsoft 365 Business Basic, Microsoft 365 Business Standard, and Microsoft 365 Business Premium.
Susan Dodds 361 Reputation points

2024-01-03T16:03:03.17+00:00

Right now, OWA appears to be working but desktop Outlook and mobile Outlook apps aren't working. Is there a fix?
Jarvis Sun-MSFT 10,266 Reputation points Microsoft External Staff

2024-01-08T07:33:29.8466667+00:00

@Susan Dodds ,

Have you tried the suggestion from Andy and how are things going now? Can Outlook app work normally?

If the answer is helpful, please click "Accept Answer" and kindly upvote it.

Share via

Exchange 2019 DKIM authentication

1 answer

Your answer