Unable to setup DKIM via PS (empty selectors)

%3CLINGO-SUB%20id%3D%22lingo-sub-1722640%22%20slang%3D%22en-US%22%3EUnable%20to%20setup%20DKIM%20via%20PS%20(empty%20selectors)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1722640%22%20slang%3D%22en-US%22%3E%3CP%3EI'm%20trying%20to%20setup%20DKIM%20for%20my%20new%20Microsoft%20365%20instance.%20I%20created%20two%20CNAME%20entries%2C%20which%20I%20verified%20via%20dmarcanalyzer.com%20(selector1%2C%20selector2).%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20got%20the%20selector%20names%20from%3A%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EGet-DkimSigningConfig%20%7C%20FL%20Identity%2CSelector1CNAME%2CSelector2CNAME%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%2C%20when%20I%20run%3A%3C%2FP%3E%3CP%3ESet-DkimSigningConfig%20-Identity%20my.domain%20-Enabled%20%24true%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECNAME%20record%20does%20not%20exist%20for%20this%20config.%20Please%20publish%20the%20following%20two%20CNAME%20records%20first.%3CBR%20%2F%3E%7B0%7D%3CBR%20%2F%3E%7B1%7D%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20get%20the%20same%20two%20blank%20%7B0%7D%20and%20%7B1%7D%20when%20enabling%20DKIM%20from%20the%20Exchange%20protection%20console.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat's%20going%20on%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1722640%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1740820%22%20slang%3D%22en-US%22%3ERe%3A%20Unable%20to%20setup%20DKIM%20via%20PS%20(empty%20selectors)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1740820%22%20slang%3D%22en-US%22%3EIf%20the%20records%20are%20in%20place%20and%20correct%20it%20may%20be%20a%20DNS%20issue%3F%20Best%20to%20contact%20MS%20support%20to%20get%20them%20to%20check.%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

I'm trying to setup DKIM for my new Microsoft 365 instance. I created two CNAME entries, which I verified via dmarcanalyzer.com (selector1, selector2). 

 

I got the selector names from: 

 

Get-DkimSigningConfig | FL Identity,Selector1CNAME,Selector2CNAME

 

However, when I run:

Set-DkimSigningConfig -Identity my.domain -Enabled $true

 

CNAME record does not exist for this config. Please publish the following two CNAME records first.
{0}
{1}

 

I get the same two blank {0} and {1} when enabling DKIM from the Exchange protection console. 

 

What's going on?

3 Replies
Highlighted
If the records are in place and correct it may be a DNS issue? Best to contact MS support to get them to check.
Highlighted

@AdminSeanMc ya it was a typo in a DNS record that was causing the problem. However, the PS error and Exchange console could have returned more helpful information than just blank {0} and {1} data. But it's now working.

Highlighted
Good to hear, I've been caught out on typos with DKIM before .