How to set up DKIM in 3 steps – set up DNS and email
Tutorial Hosting
There are three basic steps to setting up dkim for your email services first you generate your keys which we result in the public key and a private key you enter your public key into your DNS servers and your private key into your email server let’s start by generating
The keys go over to Google type in DKIM generator at this time right now port 25 is coming up for number one and then there’s also dkim core which is actually a better generator but for the purpose of this video let’s use the one that has a more user-friendly interface it also
Allows you to specify your own key so it’s a little bit more preferable when prompted in their generator enter your domain name and then this one allows you to specify your own selector key whereas the other generators sometimes generate them for you and it’s a bit messy and
Inconvenient so I like to specify my own key so I’m just gonna put in key 0 1 then you can select your bit rate which is 124 or 200 for eight generations when the public and private keys are generated you’re ready for step two which is entering the public key into
Your DNS servers in a notepad let’s build our DNS text record entry this is literally a text record entry type into the DNS server opposed to MX records see names and the other types of records that you can enter into a DNS this one is particularly a text record entry you
Will have that as one of your selections in the text records each consists of a name and a value in this case for the dkim setup the first part of our name is actually the key or selector that was used when you generated your keys at the
Generator of your choice in this case I used key 0 0 1 it says they say it’s selector and but yet it’s also the key that’s a little confusing sometimes and then you put that in the first part of your name value and so it’s key dot underscore domain key and then your
Domain name followed by a dot and so mine’s f0 here and I’ll put that in here and so my name the value from my name is key zero zero one dot underscore domain key dot F 0 dot net dot the most important part being the trailing dot at
The end of that anytime I use this set up without the trailing dot it would fail the DKIM process and so that is an important part to remember about the name the next part is the value which is your public key and that is preceded by V equals DKIM semicolon P equals your
Public key so let’s grab the pub key that was generated over here do not include the begin or end markups because in some systems those will be stripped out but we’re talking about a DNS crude text record entry so we only want to have the value selected there easy way
To handle that is just to throw it on to a notepad get rid of the carriage returns select the whole thing and then it comes after the P equals DNS always contains the public information and so the name value is set here and the actual value is set here that being your
Public key and then the selector is not part of the record but I’ve added it here that’s really used later in the process when you’re setting up your email server you’ll want to know what your selector is because that is part of the dkm process that I’ll demonstrate
Later on in the video in your email server you need to know what your selector is or it won’t match up with your public assignments here and so that’s it for domain the domain text record entry and now we can go over to our DNS and set this up this is my DNS
Control panel and don’t get confused by who you’re hosting your DNS with your domain name servers which are connected with your domain it doesn’t matter if you’re hosted at network Solutions godaddy Namecheap or your private host all DNS servers are the same DNS entries are a records see names
MX records and text records and a few others that we don’t need to cover they’re all basically the same the interfaces look different but they will all have a text record entry option and that’s what a dkim record is and so we will select text record entry and then
We will go get our name value which is here which does not include the word name so we’re going to copy that and we’re going to enter that into the name value and then the value of that record is the string that was built out here in
Your notepad the V equals deke I am P equals your private key that will go in the value this is basic to all DNS servers so if you’re having any trouble with it just contact your host and they’ll tell them you need to enter a text record and then they’ll ask you the
Name and the value more likely they’ll direct you to a control panel where you can do it on your own I’m going to add this record now I have a text record value in my DNS it’s name is the key that we specified and built out in the
Notepad and the value is also the same that we built out in the notepad now we’re done with the step two which is entering the public keys and the DNS servers that step is done now we’re ready for the final step which is entering the private key into your email
Server in my case I’m using HTML server so first let’s get our private key and copy that with the begin RSA private key open and close strings so let’s copy that and then I’m going to go over to my network server over here on my public internet server I’m using HTML server
But it doesn’t matter which email server you’re using as long as it supports dkim you will have an interface to put your dkim key into and so for this case I’m just going to drop it in the root of one of the hard drives create a new text record just name it
DKIM key and then i’m just going to paste my private key on there remember that’s the private key that you got over from your generator over here that says private key then I’m just going to exit and save as I’m exiting and then I’ll go into my control panel once again it
Doesn’t matter what email server you’re using just get down to your domain or wherever you control dkim for each domain that’s hosted on that email server in this case I’m going to use the example of f0 dkm signing is the tab for HTML server and I’m going to enable that
Service then it’s going to ask me for the private key and that is the key that I just put on that text record and so let’s find that DKIM key is what I had just created there previously next is the selector which is absolutely critical to be accurate on that’s why we
Saved it down here in our notepad and we can simply copy and paste it over into the selector value this is also the same as the key that we entered when we were generating our keys over here on port 25 or whatever generator you used it is the
Same as the selector value that is designated here now that you’ve completed step 3 which is entering your private key and the selector into your email server it’s time for a real-world test the best way to see if your dkm setup is working is to send a real-world email test there
Are third-party tools out there like MX toolbox is an excellent resource but there’s nothing like a real-world test to see that’s actually working also Gmail in particular gives you very quick and easy access to see the message header and gives you a clear definition of if the dkim is passing failing so
I’ve sent myself a test here just Maclaren test one and then go over here to the right-hand side where you can select a drop-down menu Gmail will extract the header and give you a very clear view of if your DKA setup is passing or failing along with
Your domain name so with a successful test like you just saw you have now completed your DKIM setup if anything went wrong it is most likely your selector key that is where I had the most difficulty setting this up a trailing dot or not having a trailing
Dot from some of the generators made all the difference of whether the dkim would pass or fail
To set up DKIM keys and DNS text record name: [Your Selector/Key]._domainkey.yourdomain.com. Value: v=DKIM1;p=[YourPublicKey]
Selector: Key001
#set #DKIM #steps #set #DNS #email
https://i.ytimg.com/vi/4peLLm-4Rq8/hqdefault.jpg
