Correct. No impact and will improve deliverability for messages sent from your custom domain in 365!
I would create those CNAME records as soon as possible.
This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hi All
A domain I am currently working on has DKIM records in place in External DNS however the DKIM has never bene signed in the Office365 portal.
Does this mean that the DKIM records are having no affect?
I am planning to 'sign' the dkim in the portal and have the following questions
Correct. No impact and will improve deliverability for messages sent from your custom domain in 365!
I would create those CNAME records as soon as possible.
Not sure what you mean that it has DKIM records already in place? You mean the default onmicrosoft.com DKIM records for your domain or is this for a custom domain?
If this a custom domain, then you need to set that up yes and then create CNAMEs in your DNS that point to the Microsoft DKIM records
Hi @JohnB67
Microsoft 365 automatically sets up DKIM for its initial 'onmicrosoft.com' domains. That means you don't need to do anything to set up DKIM for any initial domain names (for example, litware.onmicrosoft.com).
If you mean your custom domains, you could refer to the steps here which introduces the steps to Enable DKIM for each custom domain in your tenant
Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.
Get-DkimSigningConfig
Get-DkimSigningConfig -DomainName domain.com | Select Domain,Selector*
If nothing is returned, you’ll need to run New-DkimSigningConfig -DomainName <domain> -Enabled $false first. Office 365 should generate the DKIM selector public keys automatically,
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Thanks @Andy David - MVP
I have looked further and this is a custom domain that actually does not have the standard office365 DKIM at all. The domain does have DKIM
records but they relate to Dynamics.
So this domain does need DKIM records added to external DNS and then signed in protection.office.com portal.
Can I assume correctly that there is no negative user impact by adding DKIM into a custom domain? Thousands of emails go out every week from this domain and all user mailboxes are held in the cloud. There is an on prem exchange 'management' server.
I assume that adding these DKIM records is a positive step and will increase outbound delivery rates and also lessen the chances of someone spoofing from this domain?