This article covers the SPF and DKIM authentication processes for DuoCircle and how they are managed in Valimail Enforce. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.


Configuring DKIM authentication for your DuoCircle emails

To begin signing your outbound email messages with DKIM open the Sender Domains & DKIM configuration page for your service, found under your account in the DuoCircle client area. DKIM signing is performed on a per-domain basis, so you must list on this page all domains which will send mail through your Outbound SMTP relay service. Once you have populated this list you may enable DKIM for specific domains by clicking the red "NO" button in the row of each domain.

dkim record page

This action will enable DKIM signing for that domain and also generate a new DKIM key if no previous key is already known to the system.  The red "NO" button will turn to a green "YES" on success, and you will now see two options under the DKIM tools heading:

dkim record verified page

Click the magnifying glass button (left) will display the DKIM settings for this domain. To complete the process of configuring DKIM signing you will need to create a TXT record matching the provided values with your domain's DNS provider. DuoCircle immediately begins DKIM-signing your outbound mail from this domain, however recipients will not be able to verify the signature until this TXT record has been added and propagated through the DNS system.

Important: If you manage DKIM for your domain in Valimail, you will need to add the TXT DKIM key on your domain's Configuration page in Valimail Enforce.

You can also find the instructions on how to set up DKIM and SPF for DuoCircle, here.

Add a DuoCircle DKIM key in Enforce

1. Go to your domain's Configuration page in Valimail Enforce and publish the newly created DKIM key.

    a. Scroll down and add the DKIM key in your configuration, by clicking on Add a DKIM key

    b. Enter the selector name, the DKIM TXT value (the actual value is the entire string after the p= tag), associate the key with DuoCircle and then click Add.

add a dkim key in Enforce

You can find more detailed information on how to add a DKIM key in Valimail Enforce here. 

Configuring SPF authentication for your DuoCircle emails

Once you establish that DuoCircle is an authorized sender for your domain, you will need to add the service in your Enabled Senders list in Enforce.

1. Please go to your domain's Configuration page in Enforce.

2. Click on the + sign from the Enabled Senders section:

3. Choose DuoCircle from the list of configurable senders and then click Enable:

add a service to the authorized list in Valimail

We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.

As always, if you have any questions, please don't hesitate to submit a ticket.