SPF(not supported)

This article covers the SPF and DKIM authentication processes for Virtru and how they are managed in Valimail Enforce. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.


Configuring DKIM authentication for your Virtru emails

Your Virtru representative will send you a 40 character alpha-numeric string. Please substitute this string where it says <virtru_supplied_token> below.

Please substitute your domain where it says <yourdomain.com> below.

CNAME Records

Created so Virtru can sign DKIM and the virtrugateway.com domain can send on behalf of your domain, please create each CNAME entry below:


Name: virtrugw._domainkey.<yourdomain.com>


Value: virtrugw._domainkey.virtrugateway.com 

Name: virtrugw2._domainkey.<yourdomain.com>


Value: virtrugw2._domainkey.virtrugateway.com

TXT Record

Created so Virtru can verify domain ownership prior to implementation

Name: @

Type: TXT

Value: virtru-site-verify=<virtru_supplied_token>

Important: If you manage DKIM for your domain in Valimail, you will need to add the 2 CNAME DKIM keys on your domain's Configuration page in Valimail Enforce and the 3rd TXT record in your DNS.

You can also find the instructions on how to set up DKIM and SPF for Virtru, here.

Add a Virtru DKIM key in Enforce

1. Go to your domain's Configuration page in Valimail Enforce and publish the newly created DKIM key.

    a. Scroll down and add the two DKIM keys in your configuration, by clicking on Add a DKIM key

    b. Enter the selector name, CNAME target value, associate the key/s with Virtru and then click Add.

add a dkim key in Enforce

You can find more detailed information on how to add a DKIM key in Valimail Enforce here. 

Configuring SPF authentication for your Virtru emails

Once you establish that Virtru is an authorized sender for your domain, you will need to add the service in your Enabled Senders list in Enforce.

1. Please go to your domain's Configuration page in Enforce.

2. Click on the + sign from the Enabled Senders section:

3. Choose Virtru from the list of configurable senders and then click Enable:

add a service to the authorized list in Valimail

We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.

As always, if you have any questions, please don't hesitate to submit a ticket.