SPF(supported) 
DKIM(recommended)


This article covers the SPF and DKIM authentication processes for Censornet Email Security and how they are managed in Valimail Enforce. While only one of the two authentication methods is required for an email to pass DMARC, our recommendation is to configure both whenever possible.




TABLE OF CONTENTS





Configuring DKIM authentication for your Censornet Email Security emails




In your Censornet Email Security dashboard, go to Products E-mail SecurityProduct ConfigurationDomains

Click the DKIM icon next to the domain you wish to configure.


The full DKIM key will be shown.



DKIM key from Censornet Email Security

Seen above is an example DKIM key. 



You can find the instructions to setup DKIM in Censornet Email Security, here.





Add a Censornet Email Security DKIM key in Enforce


Once you have the DKIM key from above, go to your domain's Configuration page in Valimail Enforce and publish the newly created DKIM key. Here are the steps:


1. Please go to your domain's Configuration page in Enforce.

2. Click on the "DKIM key" button:


DKIM key button

3. From the pop-up that appears, there are several input fields

    3.1 First is the "Selector" input field, here you need to write the first word of the DKIM keys NAME, for the Censornet Email Security service, this is ussems 

    3.2 Next Click on the "Associated Service" name input field, search for Censornet Email Security, and select it from the dropdown

    3.3 The third field is the "Record Type", depending on the DKIM key that you have, there are only two types of DKIM keys, either TXT or CNAME. For the Censornet Email Security, the DKIM key is a TXT one

    3.4 As the DKIM key For the Censornet Email Security is a TXT, here you would need to input the public key, which can be found in the DKIM Key record, it is the random numbers and letters found after the "p=" tag of the record. 

    3.5 Click the "Add DKIM key" button:


"Add DKIM key" Pop-up input fields

4. Now that the DKIM key is published in your Enforce Account, Go back to Censornet Email Security, return to the Domains section, and click Verify and Enable DKIM button. 

The DKIM status will be updated to Success if the DKIM key can be verified against the domain DNS. At least one domain must have DKIM verified in order to enable DKIM on your account.


You can find more detailed information on how to add a DKIM key in Valimail Enforce here.





Configuring SPF authentication for your Censornet Email Security emails


Once you establish that Censornet Email Security is an authorized sender for your domain, you will need to add the service to your Enabled Senders list in Enforce. Here are the steps


1. Please go to your domain's Configuration page in Enforce.

2. Click on the "Enabled Senders or Neblocks" button:

Enabled Senders or Netblock


3. From the pop-up that appears, click on the service name input field, search for Censornet Email Security and select it from the dropdown then click Add:

Service name search input field



We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.





As always, if you have any questions, please don't hesitate to submit a ticket.