Cisco Cisco Email Security Appliance C160 Betriebsanweisung
4-235
Cisco IronPort AsyncOS 7.1 for Email Advanced Configuration Guide
OL-22164-02
Chapter 4 Email Authentication
Note
When you configure domain profiles and signing keys in a clustered environment,
note that the Domain Key Profile settings and Signing Key settings are linked.
Therefore, if you copy, move or delete a signing key, the same action is taken on
the related profile.
note that the Domain Key Profile settings and Signing Key settings are linked.
Therefore, if you copy, move or delete a signing key, the same action is taken on
the related profile.
Configuring DomainKeys and DKIM Signing
Signing Keys
A signing key is the private key stored on the IronPort appliance. When creating
a signing key, you specify a key size. Larger key sizes are more secure; however,
larger keys also can impact performance. IronPort supports keys from 512 bits up
to 2048 bits. The 768 - 1024 bit key sizes are considered secure and used by most
senders today. Keys based on larger key sizes can impact performance and are not
supported above 2048 bits. For more information about creating signing keys, see
a signing key, you specify a key size. Larger key sizes are more secure; however,
larger keys also can impact performance. IronPort supports keys from 512 bits up
to 2048 bits. The 768 - 1024 bit key sizes are considered secure and used by most
senders today. Keys based on larger key sizes can impact performance and are not
supported above 2048 bits. For more information about creating signing keys, see
.
If you are entering an existing key, simply paste it into the form. Another way to
use existing signing keys is to import the key as a text file. For more information
about adding existing signing keys, see
use existing signing keys is to import the key as a text file. For more information
about adding existing signing keys, see
Once a key is entered, it is available for use in domain profiles, and will appear in
the Signing Key list in the domain profile:
the Signing Key list in the domain profile: