You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: defender-office-365/email-authentication-dkim-configure.md
+8-8Lines changed: 8 additions & 8 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -5,7 +5,7 @@ f1.keywords:
5
5
ms.author: chrisda
6
6
author: chrisda
7
7
manager: deniseb
8
-
ms.date: 1/29/2024
8
+
ms.date: 04/08/2024
9
9
audience: ITPro
10
10
ms.topic: conceptual
11
11
@@ -93,10 +93,10 @@ The basic syntax of the DKIM CNAME records for custom domains that send mail fro
93
93
94
94
```text
95
95
Hostname: selector1._domainkey
96
-
Points to address or value: selector1-<CustomDomain>._domainkey.<InitialDomain>
96
+
Points to address or value: selector1-<CustomDomain>._domainkey.<InitialDomainPrefix>.n-v1.dkim.mail.microsoft
97
97
98
98
Hostname: selector2._domainkey
99
-
Points to address or value: selector2-<CustomDomain>._domainkey.<InitialDomain>
99
+
Points to address or value: selector2-<CustomDomain>._domainkey.<InitialDomainPrefix>.n-v2.dkim.mail.microsoft
100
100
```
101
101
102
102
- In Microsoft 365, two public-private key pairs are generated when DKIM signing using a custom domain or subdomain is enabled. The private keys that are used to sign the message are inaccessible. The CNAME records point to the corresponding public keys that are used to verify the DKIM signature. These records are known as _selectors_.
@@ -109,7 +109,7 @@ Points to address or value: selector2-<CustomDomain>._domainkey.<InitialDomain>
109
109
110
110
-**\<CustomDomain\>**: The custom domain or subdomain with periods replaced by dashes. For example, `contoso.com` becomes `contoso-com`, or `marketing.contoso.com` becomes `marketing-contoso-com`.
111
111
112
-
-**\<InitialDomain\>**: The \*.onmicrosoft.com that you used when you enrolled in Microsoft 365 (for example, contoso.onmicrosoft.com).
112
+
-**\<InitialDomainPrefix\>**: The custom part of the \*.onmicrosoft.com you used to enroll in Microsoft 365. For example, if you used `contoso.onmicrosoft.com`, the value is `contoso`.
113
113
114
114
For example, your organization has the following domains in Microsoft 365:
115
115
@@ -121,18 +121,18 @@ You need to create two CNAME records in each custom domain, for a total of four
121
121
-**CNAME records in the cohovineyard.com domain**:
122
122
123
123
**Hostname**: `selector1._domainkey`<br>
124
-
**Points to address or value**: `selector1-cohovineyard-com._domainkey.cohovineyardandwinery.onmicrosoft.com`
124
+
**Points to address or value**: `selector1-cohovineyard-com._domainkey.cohovineyardandwinery.n-v1.dkim.mail.microsoft`
125
125
126
126
**Hostname**: `selector2._domainkey`<br>
127
-
**Points to address or value**: `selector2-cohovineyard-com._domainkey.cohovineyardandwinery.onmicrosoft.com`
127
+
**Points to address or value**: `selector2-cohovineyard-com._domainkey.cohovineyardandwinery.n-v2.dkim.mail.microsoft`
128
128
129
129
-**CNAME records in the cohowinery.com domain**:
130
130
131
131
**Hostname**: `selector1._domainkey`<br>
132
-
**Points to address or value**: `selector1-cohowinery-com._domainkey.cohovineyardandwinery.onmicrosoft.com`
132
+
**Points to address or value**: `selector1-cohowinery-com._domainkey.cohovineyardandwinery.n-v1.dkim.mail.microsoft`
133
133
134
134
**Hostname**: `selector2._domainkey`<br>
135
-
**Points to address or value**: `selector2-cohowinery-com._domainkey.cohovineyardandwinery.onmicrosoft.com`
135
+
**Points to address or value**: `selector2-cohowinery-com._domainkey.cohovineyardandwinery.n-v2.dkim.mail.microsoft`
136
136
137
137
## Configure DKIM signing of outbound messages in Microsoft 365
0 commit comments