Cisco Cisco Email Security Appliance C190 Technical References

Page of 314
 
31
Cisco AsyncOS 9.1 for Email CLI Reference Guide
 
Chapter 3      The Commands: Reference Examples
  Domain Keys
domainkeysconfig
Description
Configure DomainKeys/DKIM support.
Usage
Commit: This command requires a ‘commit’.
Cluster Management: This command can be used in all three machine modes (cluster, group, machine).
Batch Command: This command supports a batch format.
Note
For enhanced security, if encryption of sensitive data in the appliance is enabled in FIPS mode, you will 
not be able view the private key. If you intend to edit the private key, you can enter an existing private 
key or generate a new private key.
Batch Format - Signing Profiles
The batch format of the 
domainkeysconfig
 command can be used to create, edit, or delete signing 
profiles 
Adding a DomainKeys/DKIM signing profile:
domainkeysconfig profiles signing new <name> <type> <domain> 
<selector> <user-list> [options]
Table 3-2
domainkeysconfig New Signing Profile Arguments
Argument
Description
<name>
Name of domain profile.
<type>
Type of domain.  Can be 
dk
 or 
dkim
.
<domain>
Domain field of domain profile.  This forms the 
d
 tag 
of the Domain-Keys signature.
<selector>
Selector field of domain profile.  This forms the 
s
 tag 
of the Domain-Keys signature.
<user-list>
Comma separated list of domain profile users.  Users 
are used to match against email addresses to 
determine if a specific domain profile should be used 
to sign an email. Use the special keyword 
all
 to 
match all domain users.
[options]
--key_name
The name of the private key that will be used for 
signing.