This article covers the SPF and DKIM authentication processes for OpenSRS Email and how they are managed in Valimail. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.

Step 1: Generate a DKIM public key, private key, and key selector using a DKIM generator tool. There are a number of similar tools available on search engines. The tool will ask for the domain name and the DomainKey selector:

NOTE: If you are using the SystemDNS nameservers, please generate the key in 1024 bits, not 2048 bits.

Step 2: Add the public key as a TXT record on the domain's DNS zone file. You will need to add this record on a subdomain based on your key selector. In our example, the subdomain would be key._domainkey.example.com

Step 3: Log into the MAC and search for the domain in the top left. On the domain overview page you will see a "DKIM" section, click to expand. In the DKIM section there are two fields: Selector and Key. Enter the selector you set for the domain and paste the private key into the key field. NOTE: Only the selector is needed in the selector field, nothing more. The example screen shot below shows the selector dkim1 being used.

Click update at the bottom of the page. After saving the private key the data will be obfuscated to protect the private key. The key cannot be recovered from our system once set.

You can also find the instructions on how to set up DKIM and SPF for OpenSRS Email, here.

You can find more detailed information on how to add a DKIM key in Valimail, here:

Once you establish that OpenSRS Email is an authorized sender for your domain, you will need to add the service in your Enabled Senders.

You will find more detailed information on how to add a service for your domain in Valimail, here:

Note: We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.