This article covers the SPF and DKIM authentication processes for AON Assessment Solutions and how they are managed in Valimail. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.

Since DKIM requires an active key management that affects the mail server configuration as well as

the DNS, the public keys are not published in the client DNS directly. Instead, AON Assessment Solutions asks you to set

up CNAME records that point to your key sets:

Type Record Location Value

CNAME aas.1._domainkey.<sender domain> dkim.<sender domain>.1.aas.services.

CNAME aas.2._domainkey.<sender domain> dkim.<sender domain>.2.aas.services.

CNAME aas.3._domainkey.<sender domain> dkim.<sender domain>.3.aas.services.

All installed keys are domain-specific; please do not point CNAME records for different sender

domains to the same keys, since this will not be reflected by Aon's server configuration.

Please note that the DKIM selector, being part of an automated solution, cannot be customized.

Important: If you manage DKIM for your domain in Valimail, you will need to add those 3 CNAME DKIM keys on your domain's Configuration page in Valimail Enforce, as outlined in the Add an AON Assessment Solutions DKIM key in Enforce section below.

You can also find the instructions on how to set up DKIM and SPF for AON Assessment Solutions, here.

You can find more detailed information on how to add a DKIM key in Valimail, here:

Once you establish that AON Assessment Solutions is an authorized sender for your domain, you will need to add the service in your Enabled Senders.

You will find more detailed information on how to add a service for your domain in Valimail, here:

Note: We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.