DKIM adds a digital signature to the emails you send from your domain. This process involves two keys: a private key, which your mail server uses to sign emails, and a public key, which is published in a DNS record. Mail servers use this public key to verify that emails actually come from your domain and have not been altered in transit.
First, you need to generate the DKIM keys from the Google Admin Console. This is where Google Workspace will provide you with the required DKIM value.
To start the process, log in to your Google Admin account. Once inside, go to the side menu under Apps, then select Google Workspace and Gmail:
Next, from this window, select the option "Authenticate email":
Once here, a DKIM record will appear by default. Select "Generate new record". Below is an example of how the record is generated:
With the DKIM value generated from the Google Admin Console, the next step is to add this value to your domain's DNS configuration. Below, we explain how to do it from our control panel.
To begin, log in to your cdmon account in our control panel. Once inside, locate the section where you can manage DNS records.
In the DNS section, look for the option to add a new record. Select the record type as TXT, which is used for DKIM configuration.
Now, you must enter the information provided by Google Workspace. Replace the following with the values shown in your Google Admin panel:
- Type: Select TXT.
- Redirect: Choose "A specific subdomain". For example: google._domainkey.yourdomain.com.
- Value: Enter the full DKIM value provided by Google Workspace, including the generated public key.
Example screenshot of creating a Google Workspace DKIM record:
After entering all the details, save the new DNS record. Changes may take a few minutes or hours to propagate.
With these steps, you will have configured your external DKIM record in our control panel. You can also check our guide on how to add a DKIM in cdmon DNS.