DKIM on new microsoft 365 tenant

%3CLINGO-SUB%20id%3D%22lingo-sub-1402231%22%20slang%3D%22en-US%22%3EDKIM%20on%20new%20microsoft%20365%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1402231%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20multiple%20tenants%20not%20being%20able%20to%20enable%20dkim%2C%20with%20the%20error%20%22No%20DKIM%20keys%20saved%20for%20this%20domain%22.%20This%20problem%20is%20both%20on%20my%20exampledomain.onmicrosoft.com%20and%20exampledomain.com.%20I%20have%20created%20the%20two%20cname%20dns%20records%20for%20selector1%20%2B%20selector2.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnyone%20got%20a%20tip%20%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ekind%20regards%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESveist%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1402231%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1402570%22%20slang%3D%22en-US%22%3ERe%3A%20DKIM%20on%20new%20microsoft%20365%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1402570%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F672549%22%20target%3D%22_blank%22%3E%40sveist%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJust%20tried%20this%20with%20a%20domain%20I%20didn't%20have%20DKIM%20set%20up%20and%20just%20cliening%20enable%20after%20creating%20the%20DNS%20records.%20Might%20be%20worth%20running%26nbsp%3B%3C%2FP%3E%3CPRE%20class%3D%22lia-code-sample%20language-powershell%22%3E%3CCODE%3EGet-DkimSigningConfig%20%7C%20Format-List%3C%2FCODE%3E%3C%2FPRE%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EMight%20throw%20up%20some%20errors.%26nbsp%3B%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsecurity%2Foffice-365-security%2Fuse-dkim-to-validate-outbound-email%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsecurity%2Foffice-365-security%2Fuse-dkim-to-validate-outbound-email%3Fview%3Do365-worldwide%3C%2FA%3E%26nbsp%3Bhas%20been%20helpful%20for%20me%20troubleshooting%20in%20the%20past%20in%20case%20you've%20not%20seen%20it.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1402629%22%20slang%3D%22en-US%22%3ERe%3A%20DKIM%20on%20new%20microsoft%20365%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1402629%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F383653%22%20target%3D%22_blank%22%3E%40HidMov%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJust%20tried%20the%20powershell%20command%20but%20it%20shows%20blank%20result.%20I'm%20pretty%20sure%20the%20xxx.onmicrosoft.com%20domain%20is%20missing%20the%20dns%20settings%20for%20dkim%2C%20because%20if%20i%20check%20my%20settings%20with%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fmxtoolbox.com%2Fdkim.aspx%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fmxtoolbox.com%2Fdkim.aspx%3C%2FA%3E%26nbsp%3BI%20get%20errors.%20Maybe%20I%20am%20to%20impatient%2C%20I%20created%20this%20tenant%20just%2024%20hours%20ago.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ekind%26nbsp%3B%20regards%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESveist%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1402971%22%20slang%3D%22en-US%22%3ERe%3A%20DKIM%20on%20new%20microsoft%20365%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1402971%22%20slang%3D%22en-US%22%3E%3CP%3EOpen%20a%20support%20case.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1402975%22%20slang%3D%22en-US%22%3ERe%3A%20DKIM%20on%20new%20microsoft%20365%20tenant%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1402975%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F672549%22%20target%3D%22_blank%22%3E%40sveist%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAccording%20to%20the%20link%20I%20posted%2C%20the%20*.onmicrosoft.com%20domain%20is%20handled%20by%20Microsoft%20and%20they%20sort%20out%20the%20keys%20automatically%2FDNS%20automatically.%20It%20is%20possible%20that%20the%20new%20tenant%20needs%20a%20bit%20more%20time%20to%20get%20everything%20all%20set%20up.%20Can%20take%20some%20time%20for%20the%20CNAMES%20to%20propagate%20as%20well.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Hi,

 

I have multiple tenants not being able to enable dkim, with the error "No DKIM keys saved for this domain". This problem is both on my exampledomain.onmicrosoft.com and exampledomain.com. I have created the two cname dns records for selector1 + selector2.

 

Anyone got a tip ?

 

kind regards,

 

Sveist

4 Replies

Hi @sveist 

 

Just tried this with a domain I didn't have DKIM set up and just cliening enable after creating the DNS records. Might be worth running 

Get-DkimSigningConfig | Format-List

 

Might throw up some errors.  https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/use-dkim-to-validate-out... has been helpful for me troubleshooting in the past in case you've not seen it.

@HidMov 

 

Just tried the powershell command but it shows blank result. I'm pretty sure the xxx.onmicrosoft.com domain is missing the dns settings for dkim, because if i check my settings with https://mxtoolbox.com/dkim.aspx I get errors. Maybe I am to impatient, I created this tenant just 24 hours ago.

 

kind  regards,

 

Sveist

Open a support case.

Hi @sveist

 

According to the link I posted, the *.onmicrosoft.com domain is handled by Microsoft and they sort out the keys automatically/DNS automatically. It is possible that the new tenant needs a bit more time to get everything all set up. Can take some time for the CNAMES to propagate as well.