Forum Discussion

Sumesh1980's avatar
Sumesh1980
Copper Contributor
Aug 22, 2020
Solved

Not Able to enable DKIM in Office365 - Online Exchange server

I have been trying to enable DKIM on office365 since a couple of days. I have entered all the require CNAME entry in the DNS. But when I try to run the below command via Powershell    Ran Powershel...
  • harveer singh's avatar
    harveer singh
    Aug 22, 2020

    Hey Sumesh1980 ,

     

    Okay, Just tested it, it appears you did not run the command :

    New-DkimSigningConfig -DomainName <domain> -Enabled $false before updating the CNAME records.

     

    So here are the steps that you need to complete in order to get this working:

    1. New-DkimSigningConfig -DomainName <domain> -Enabled $false
    2. Get-DkimSigningConfig -Identity <domain> | Format-List Selector1CNAME, Selector2CNAME

     

    Grab the CNAMES and update them in DNS.

    Then run the command:

    Set-DkimSigningConfig -Identity <domain> -Enabled $true

     

    After running the command in Step 1, it should not give you the domain not found error.

     

    Thanks

harveer singh's avatar
harveer singh
Steel Contributor
Aug 22, 2020

Hey Sumesh1980 ,

 

Run Get-Accepteddomain from exchange powershell, check if you are able to see the domain listed here.

Verify exchange services are selected while adding the domain, step 5 in the following article : https://support.microsoft.com/en-us/office/connect-your-domain-to-office-365-cd74b4fa-6d34-4669-9937-ed178ac84515

 

If you don't see the domain listed in get-accepteddomain , and the services are selected that would mean a sync did not happen AADS and EXO; you will have to get a ticket going with MS to run the sync.  Also, check if you are able to set the domain as SMTP for one of the users and try sending out a test email.

 

Thanks

  • Sumesh1980's avatar
    Sumesh1980
    Copper Contributor
    Aug 22, 2020

    harveer singh 

    Get-Accepteddomain is showing my domain. And also I am able to send emails that were configured on my mobile. 

     

    • harveer singh's avatar
      harveer singh
      Steel Contributor
      Aug 22, 2020

      Hey Sumesh1980 ,

       

      Okay, Just tested it, it appears you did not run the command :

      New-DkimSigningConfig -DomainName <domain> -Enabled $false before updating the CNAME records.

       

      So here are the steps that you need to complete in order to get this working:

      1. New-DkimSigningConfig -DomainName <domain> -Enabled $false
      2. Get-DkimSigningConfig -Identity <domain> | Format-List Selector1CNAME, Selector2CNAME

       

      Grab the CNAMES and update them in DNS.

      Then run the command:

      Set-DkimSigningConfig -Identity <domain> -Enabled $true

       

      After running the command in Step 1, it should not give you the domain not found error.

       

      Thanks

      • SeunGab's avatar
        SeunGab
        Copper Contributor
        Apr 27, 2021
        Great. It solve my issue

Resources