SPF(supported) DKIM(recommended)
This article covers the SPF and DKIM authentication processes for Zoho Mail and how they are managed in Valimail Enforce. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.
TABLE OF CONTENTS
- Configuring DKIM authentication for your Zoho emails
- Add a Zoho Mail DKIM key in Enforce
- Configuring SPF authentication for your Zoho emails
Configuring DKIM authentication for your Zoho emails
Configuring DKIM authentication for your domain in Zoho Mail has 3 major steps:
- Generate unique public DKIM Key-value using a default selector in Zoho Mail.
- Add the DKIM key in Valimail Enforce.
- Validate the selector and Enable DKIM in Zoho Mail.
Generate Unique Domain Key in Zoho Mail
1. Log in to the Control Panel from here as administrator or super administrator.
2. Go to Domains from the left menu, and choose the domain for which you want to configure DKIM.
3. In the Email Configuration tab, select DKIM.
4. Click on Add to add a new selector for the domain.
5. Provide the selector name, for the domain to be used with Zoho Mail. Ex: zoho
6. Click Add. The selector will be added and a TXT record will be generated and displayed across the added selector.
7. You can copy the text in the TXT value field.
8. You need to the DKIM key in Valimail Enforce before you click Verify.
9. After you add the DKIM key in Enforce, log in to Zoho Mail Control Panel.
10. Click Verify across the particular selector. The text record will be modified to the verified state.
11. Once verified, you will see a prompt to Enable DKIM immediately or later. You can enable DKIM immediately to start signing DKIM signatures for the emails from your domain.
12. Once you enable, the DKIM signatures will be added to all the emails generated from the domain.
You can also find these instructions on how to set up DKIM in Zoho Mail here.
Info: You can use multiple selectors for a single domain to provide separate DKIM signatures for multiple offices in different locations or provide separate DKIM signatures for a set of accounts.
You can add more selectors for specific DKIM keys for different sets of users or for different locations of offices.
When you have multiple selectors, you can associate the different sets of users with the selectors based on your requirement. The default selector is automatically applied for all users and hence it will not be listed in the drop down.
Once you add an additional selector, you can associate for a specific set of users from the User List section.
Add a Zoho Mail DKIM key in Enforce
1. Go to your domain's Configuration page in Valimail Enforce and publish the newly created DKIM key.
a. Scroll down and add the two DKIM keys in your configuration, by clicking on Add a DKIM key.
b. Enter the selector name, the DKIM TXT value (the actual value is the entire string after the p= tag), associate the key with Zoho Mail and then click Add.
You can find more detailed information on how to add a DKIM key in Valimail Enforce here.
Configuring SPF authentication for your Zoho emails
Once you establish that Zoho Mail is an authorized sender for your domain, you will need to add the service in your Enabled Senders list in Enforce.
1. Please go to your domain's Configuration page in Enforce.
2. Click on the + sign from the Enabled Senders section:
3. Choose Zoho Mail from the list of configurable senders and then click Enable:
We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.
As always, if you have any questions, please don't hesitate to submit a ticket.