SPF(supported) / (dedicated subdomain)

This article covers the SPF and DKIM authentication processes for Kayako and how they are managed in Valimail Enforce. Because this service leverages Sendgrid's email infrastructure, it requires additions to your DNS records outside of the Valimail platform. Adding Kayako as an authorized sender in the Valimail Enforce usually requires a dedicated subdomain to be pointed to the Sendgrid infrastructure and typically the DKIM keys will be added in the Valimail platform.


Configuring DKIM authentication for your Kayako emails

If you want to enable DKIM for a custom domain or your own company's email address, you need to add some CNAME entries to your DNS records first.

1. If you are adding DKIM for a custom domain, start by signing in to your domain's DNS provider.

Note: For help enabling DKIM for your default Kayako domain (e.g., support@[yourcompany].Kayako.com), skip to step 5.

2. Go to your DNS records.

3. Add three new CNAME records that read as follows:


email.[YOURDOMAINNAME].com, pointing to email.kayako.com

s1._domainkey.[YOURDOMAINNAME].com, pointing to s1._domainkey.kayako.com

s2._domainkey.[YOURDOMAINNAME].com, pointing to s2._domainkey.kayako.com

Important: If you manage DKIM in Valimail fro your domain, you will need to add the 2 CNAME DKIM keys on your domain's Configuration page in Valimail Enforce and the 3rd CNAME record in your DNS. 


  • Replace [YOURDOMAINNAME] with your custom domain.
  • We recommend that you wait for 24 hours to allow your updated DNS records to propagate. If you enable DKIM in Kayako before the changes have taken effect, your emails may not send correctly.
  • If any of the required CNAME records are already in use by other services, you need to contact the Kayako support team asking to set up sender authentication manually via our SendGrid account.

4. Once your changes have taken effect, sign in to Kayako and go to the admin area.

5. Click Email on the sidebar and switch to the Settings tab. (see screenshot below for steps 5-7).

6. Check the Use DKIM to authenticate box.

7. Click the Save button to enable DKIM.

a screenshot of a computer screen

You can also find the instructions on how to set up DKIM and SPF for Kayako, here.

Add a Kayako DKIM key in Enforce

1. Go to your domain's Configuration page in Valimail Enforce and publish the newly created DKIM key.

    a. Scroll down and add the two DKIM keys in your configuration, by clicking on Add a DKIM key

    b. Enter the selector name, CNAME target value, associate the key/s with Kayako and then click Add.

a screenshot of a computer

You can find more detailed information on how to add a DKIM key in Valimail Enforce here. 

Configuring SPF authentication for your Kayako emails

Once you establish that Kayako is an authorized sender for your domain, you will need to add the service in your Enabled Senders list in Enforce.

1. Please go to your domain's Configuration page in Enforce.

2. Click on the + sign from the Enabled Senders section:

a screenshot of a email

3. Choose Kayako from the list of configurable senders and then click Enable:

a screenshot of a computer

We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.

As always, if you have any questions, please don't hesitate to submit a ticket.