Cisco Cisco Email Security Appliance C370 User Guide
![Cisco](https://files.manualsbrain.com/attachments/7380d0050044647c30f5c24bbbf5d0c0b6d9bb84/common/fit/150/50/faa183d287233c52228cfea3dbc2a127fe780f60564fcb0955d9c3d1cd23/brand_logo.png)
17-7
Cisco AsyncOS 8.0.2 for Email User Guide
Chapter 17 Email Authentication
Configuring DomainKeys and DKIM Signing
Creating Domain Profiles for DomainKeys Signing
Procedure
Step 1
Choose Mail Policies > Signing Profiles.
Step 2
In the Domain Signing Profiles section, click Add Profile.
Step 3
Enter a name for the profile.
Step 4
For the Domain Key Type, choose Domain Keys.
Additional options appear on the page.
Step 5
Enter the domain name.
Step 6
Enter a selector. Selectors are arbitrary names prepended to the "_domainkey" namespace, used to help
support multiple concurrent public keys per sending domain. A selector value and length must be legal
in the DNS namespace and in email headers with the additional provision that they cannot contain a
semicolon.
support multiple concurrent public keys per sending domain. A selector value and length must be legal
in the DNS namespace and in email headers with the additional provision that they cannot contain a
semicolon.
Step 7
Select the canonicalization (no forwarding whitespaces or simple).
Step 8
If you have already created a signing key, select a signing key. Otherwise, skip to the next step. You must
create (or import) at least one signing key in order to have signing keys to choose from in the list. See
create (or import) at least one signing key in order to have signing keys to choose from in the list. See
.
Step 9
Enter users (email addresses, hosts, etc.) that will use the domain profile for signing.
Step 10
Submit and commit your changes.
Step 11
At this point (if you have not already) you should enable DomainKeys/DKIM signing on an outgoing
mail flow policy (see
mail flow policy (see
Note
If you create both a DomainKeys and DKIM profile, AsyncOS performs both DomainKeys and
DKIM signing on outgoing mail.
DKIM signing on outgoing mail.
Creating a New Domain Profile for DKIM Signing
Procedure
Step 1
Choose Mail Policies > Signing Profiles.
Step 2
In the Domain Signing Profiles section, click Add Profile.
Step 3
Enter a name for the profile.
Step 4
For the Domain Key Type, choose DKIM.
Additional options appear on the page.
Step 5
Enter the domain name.
Step 6
Enter a selector. Selectors are arbitrary names prepended to the "_domainkey." namespace, used to help
support multiple concurrent public keys per sending domain. A selector value and length must be legal
in the DNS namespace and in email headers with the additional provision that they cannot contain a
semicolon.
support multiple concurrent public keys per sending domain. A selector value and length must be legal
in the DNS namespace and in email headers with the additional provision that they cannot contain a
semicolon.