SPF(supported) / (dedicated subdomain)
DKIM(recommended)



This article covers the SPF and DKIM authentication processes for Arlo and how they are managed in Valimail Enforce. Because this service leverages Sendgrid's email infrastructure, it requires additions to your DNS records outside of the Valimail platform. Adding Arlo as an authorized sender in the Valimail Enforce usually requires a dedicated subdomain to be pointed to the Sendgrid infrastructure and typically the DKIM keys will be added in the Valimail platform.




TABLE OF CONTENTS





Configuring DKIM authentication for your Arlo emails


Setting up DKIM for your platform is a three step process that requires steps by both the Arlo Support team and your technical staff (as it requires the addition of some CNAME records to your DNS).


1. Arlo generates the CNAME records

If you would like to set up DKIM for your emails, the first step is to contact Arlo Support or your Arlo service owner. You should provide the email address your emails are sent from, the name and email address of the technical staff member who will be adding the records to your DNS and, if known, your DNS host.


Note: The Arlo platforms send emails using SendGrid. If you already have CNAME records for SendGrid for another application, please let us know. We are able to add custom identifiers to the records to differentiate them in your DNS.


The Arlo Support agent will generate the CNAME records for your platform and send the details through to your technical staff member for addition to your DNS.


Important: If you manage DKIM in Valimail for your domain, you will need to add the 2 CNAME DKIM keys on your domain's Configuration page in Valimail Enforce and add the 3rd CNAME record in your DNS.


2. Add the CNAME records to your DNS

Once received, you will need to add the CNAME records on your domain's Configuration page in Valimail Enforce and in your DNS.

Once added, please let Arlo Support (or your Arlo service owner) know so we can complete the setup.


3. Arlo verifies the records

Once the records have been added to your DNS, Arlo can verify the records have been added correctly and finalize the DKIM setup.


The records may take up to 24 hours to be propagated through your DNS so it may take a day or two to verify the records.



You can also find the instructions on how to set up DKIM and SPF for Arlo, here.






Add an Arlo DKIM key in Enforce


1. Go to your domain's Configuration page in Valimail Enforce and publish the newly created DKIM key.


    a. Scroll down and add the two DKIM keys in your configuration, by clicking on Add a DKIM key

    b. Enter the selector name, CNAME target value, associate the key/s with Arlo and then click Add.


a screenshot of a computer


You can find more detailed information on how to add a DKIM key in Valimail Enforce here. 






Configuring SPF authentication for your Arlo emails


Once you establish that Arlo is an authorized sender for your domain, you will need to add the service in your Enabled Senders list in Enforce.


1. Please go to your domain's Configuration page in Enforce.

2. Click on the + sign from the Enabled Senders section:


a screenshot of a email


3. Choose Arlo from the list of configurable senders and then click Enable:


a screenshot of a computer


We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.






As always, if you have any questions, please don't hesitate to submit a ticket.