SPF(supported) / (dedicated subdomain) DKIM(recommended)
This article covers the SPF and DKIM authentication processes for Flywheel and how they are managed in Valimail Enforce. Because this service leverages Sendgrid's email infrastructure, it requires additions to your DNS records outside of the Valimail platform. Adding Flywheel as an authorized sender in the Valimail Enforce usually requires a dedicated subdomain to be pointed to the Sendgrid infrastructure and typically the DKIM keys will be added in the Valimail platform.
TABLE OF CONTENTS
- Configuring DKIM authentication for your Service Name emails
- Add a Service Name DKIM key in Enforce
- Configuring SPF authentication for your Flywheel emails
Configuring DKIM authentication for your Flywheel emails
1. Go to the Advanced tab and look for the Email Deliverability card.
Note: If you don’t see the Email Deliverability card you will need to reach out to support for help.
2. Click Set up email.
3. Select the domain you want to authenticate. A pop-up will appear asking you to select the domain that you want to authenticate. Simply choose the domain from the dropdown and then click Set Domain and Begin Setup.
Note: Only the domains that have been added to your site will appear in the domain drop down. If you have not added your domain to Flywheel, you will not be able to authenticate that domain with SendGrid.
4. Add CNAME records to your DNS provider. After you select your domain, you’ll be redirected to a page that will explain how to add the CNAME records. Follow the instructions to add them, then come back to this page and click Check Validation.
Important: If you manage DKIM in Valimail for your domain, you will need to add the 2 CNAME DKIM keys on your domain's Configuration page in Valimail Enforce and add the 3rd CNAME record in your DNS.
5. We’ll make sure the validation worked. After you add the CNAME records in Valimail and to your DNS provider and click Ok, I’m Done, we’ll do some verifying on our end and then let you know whether or not the CNAME records were successfully added. If they weren’t, we’ll show you which records errored out so you can try and fix those with your DNS provider.
6. When everything validates successfully, you’ll be taken back to the Advanced page with a success banner and an indicator in the card that your domain was successfully authenticated.
Note: You can always check the status of your domain authentication set-up in the Email Deliverability card on the Advanced tab. An orange banner means that you didn’t finish the set-up and a red banner means that your records didn’t validate correctly with your DNS provider. Double check that the CNAME records are correct and then try again.
You can also find the instructions on how to set up DKIM and SPF for Flywheel, here.
Add a Flywheel DKIM key in Enforce
1. Go to your domain's Configuration page in Valimail Enforce and publish the newly created DKIM key.
a. Scroll down and add the two DKIM keys in your configuration, by clicking on Add a DKIM key.
b. Enter the selector name, CNAME target value, associate the key/s with Flywheel and then click Add.
You can find more detailed information on how to add a DKIM key in Valimail Enforce here.
Configuring SPF authentication for your Flywheel emails
Once you establish that Flywheel is an authorized sender for your domain, you will need to add the service in your Enabled Senders list in Enforce.
1. Please go to your domain's Configuration page in Enforce.
2. Click on the + sign from the Enabled Senders section:
3. Choose Flywheel from the list of configurable senders and then click Enable:
We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.
As always, if you have any questions, please don't hesitate to submit a ticket.