SPF(supported)
DKIM(recommended)



This article covers the SPF and DKIM authentication processes for Benchmark and how they are managed in Valimail Enforce. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.




TABLE OF CONTENTS




Configuring DKIM authentication for your Benchmark emails


1. Click on your account name and select Account Settings.


a screenshot of a computer


2. Then, select Domain Authentication. Here you will see the domains available to authenticate.


3. If your domain is available to authenticate, click on the Start option.


a screenshot of a computer

4. Confirm your choice by clicking Start Authentication. After confirming, we will begin generating your records. These can typically take up to 30 minutes to generate. Exit this page by clicking on the X on the top right of the page.


a white background with green text

Back on the Domain authentication page, you’ll see the authentication status of the records. If your records are ready to be added to your DNS, the DNS Record column will read View instead of Start.


5. Click on the View option to see your CNAME records.


a screenshot of a login screen

6. In another browser window, go to your domain’s DNS settings. Copy and paste each CNAME record separately in your DNS settings.


Important: If you manage DKIM in Valimail for your domain, you will need to add the CNAME DKIM key on your domain's Configuration page in Valimail Enforce and add the hostname CNAME record in your DNS.


a screenshot of a computer

7. Once you are done, go back to Benchmark and click on the Check Configuration option.


a screenshot of a computer

8. You will see a success message and green checkmarks next to each record if you added them correctly. Record configuration can sometimes take up to 24 hours, depending on your domain hosting service.


a screenshot of a computer

Additionally, the domain’s status will change to In Progress; no further action is needed from you. The authentication period can take up to 24 hours. You should not send any emails from your domain during this time as the domain is not yet authenticated.


When your domain is ready to send emails, the status will change to Authenticated.


a screenshot of a computer

Note: If you did not add your records correctly, you would see an error message and an X next to the records that need updating.


If you receive an error message, review the records you added to your DNS settings. If the error is not visible to you, delete both of the records previously added and add them again.


a screenshot of a computer


You can also find the instructions on how to set up DKIM and SPF for Benchmark, here.






Add a Benchmark DKIM key in Enforce


1. Go to your domain's Configuration page in Valimail Enforce and publish the newly created DKIM key.


    a. Scroll down and add the two DKIM keys in your configuration, by clicking on Add a DKIM key

    b. Enter the selector name, CNAME target value, associate the key/s with Benchmark and then click Add.


a screenshot of a computer


You can find more detailed information on how to add a DKIM key in Valimail Enforce here. 






Configuring SPF authentication for your Benchmark emails


Once you establish that Benchmark is an authorized sender for your domain, you will need to add the service in your Enabled Senders list in Enforce.


1. Please go to your domain's Configuration page in Enforce.

2. Click on the + sign from the Enabled Senders section:


a screenshot of a email


3. Choose Benchmark from the list of configurable senders and then click Enable:


a screenshot of a computer


We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.






As always, if you have any questions, please don't hesitate to submit a ticket.