{"id":4179,"date":"2026-06-08T18:00:34","date_gmt":"2026-06-08T15:00:34","guid":{"rendered":"https:\/\/support.withsecure.com\/en\/?post_type=support_article&p=4179"},"modified":"2026-06-08T18:00:34","modified_gmt":"2026-06-08T15:00:34","slug":"messaging-security-gateway-dkim-and-dmark-configuration","status":"publish","type":"support_article","link":"https:\/\/support.withsecure.com\/fr\/support-articles\/messaging-security-gateway-dkim-and-dmark-configuration\/","title":{"rendered":"Messaging Security Gateway – DKIM and DMARK configuration"},"content":{"rendered":"

Issue:<\/h3>\n

How to configure DKIM and DMARC in Messaging Security Gateway?<\/p>\n

Resolution:<\/h3>\n

To configure DKIM:<\/b><\/p>\n

    \n
  1. Navigate to\u00a0Email Protection >\u00a0Email Authentication > DKIM > General<\/b><\/li>\n
  2. For\u00a0Enable<\/i>, select\u00a0On<\/b>.\u00a0A\u00a0Policy Routes<\/i>\u00a0section appears<\/li>\n
  3. Enable\u00a0Restrict processing to selected policy routes…<\/b><\/li>\n
  4. Confirm that the policy route\u00a0default_inbound<\/i>\u00a0is present in the\u00a0Require Any Of-<\/i>list<\/li>\n
  5. Add any other required inbound policy routes to the\u00a0Require Any Of-<\/i>list<\/li>\n
  6. Click\u00a0Save Changes<\/b><\/li>\n<\/ol>\n

    To enable DKIM signing:<\/b><\/p>\n

    DKIM signing is not required for authenticating incoming email, but needs to be set up if you want others to be able to authenticate emails coming from your organization.<\/p>\n

      \n
    1. Navigate to\u00a0Email Protection >\u00a0Email Authentication > DKIM Signing> General<\/b><\/li>\n
    2. For\u00a0Enable<\/i>, select\u00a0On<\/b><\/li>\n
    3. Set the DKIM Signing Error<\/i> to Reject the message temporarily<\/i>\n
        \n
      1. Click Edit Rule…<\/b><\/li>\n
      2. Make sure Delivery Method<\/i> is set to Retry<\/i><\/li>\n
      3. Click <\/i>Save Changes<\/b><\/li>\n<\/ol>\n<\/li>\n
      4. Navigate to Email Protection >\u00a0Email Authentication > DKIM Signing> Keys<\/b><\/li>\n
      5. Click Generate Key<\/b><\/li>\n
      6. Set Domain <\/i>to the domain that the key should be signing<\/li>\n
      7. Set Selector <\/i>to any alphanumeric string, at your discretion. The important thing is to NOT leave the field empty<\/li>\n
      8. Set Scope<\/i> to either Any<\/i>, Domain Including Sub-Domains<\/i> or Exact Domain<\/i><\/li>\n
      9. Tick the Disable processing for selected policy routes…<\/b>-checkbox<\/li>\n
      10. Add all inbound policy routes to the Disable For Any Of<\/i>-list<\/li>\n<\/ol>\n

        Once the key is generated, a DNS text record is also generated which\u00a0will need to be published to your\u00a0DNS servers. Click View <\/b>in the DNS Text Record<\/i> column to see the record for a specific key.<\/p>\n

        To enable DMARC:<\/h3>\n
          \n
        1. If SPF is not enabled:\n
            \n
          1. Navigate to\u00a0Email Protection ><\/b>\u00a0Email Authentication > SPF > General<\/b><\/li>\n
          2. For\u00a0Enable<\/i>, select\u00a0On<\/b>.\u00a0A\u00a0Policy Routes<\/i>\u00a0section appears<\/li>\n
          3. Enable\u00a0Restrict processing to selected policy routes…<\/b><\/li>\n
          4. Confirm that the policy route\u00a0default_inbound<\/i>\u00a0is present in the\u00a0Require Any Of-<\/i>list<\/li>\n
          5. Add any other required inbound policy routes to the\u00a0Require Any Of-<\/i>list<\/li>\n
          6. Click\u00a0Save Changes<\/b><\/li>\n<\/ol>\n<\/li>\n
          7. If DKIM is not enabled:<\/li>\n<\/ol>\n
              \n
            • Refer back to the instructions above, "To configure DKIM", regarding how to set up DKIM<\/li>\n<\/ul>\n
                \n
              1. Enable DMARC:\n
                  \n
                1. Before you enable DMARC, ensure that you have also enabled the SPF and DKIM modules<\/li>\n
                2. Navigate to\u00a0Email Protection >\u00a0Email Authentication > DMARC\u00a0> General<\/b><\/li>\n
                3. For\u00a0Enable<\/i>, select\u00a0On<\/b>.\u00a0A\u00a0Policy Routes<\/i>\u00a0section appears<\/li>\n
                4. Enable\u00a0Restrict processing to selected policy routes…<\/b><\/li>\n
                5. Confirm that the policy route\u00a0default_inbound<\/i>\u00a0is present in the\u00a0Require Any Of-<\/i>list<\/li>\n
                6. Add any other required inbound policy routes to the\u00a0Require Any Of-<\/i>list\n
                    \n
                  • Important:<\/b>\u00a0Ensure that the same inbound policy routes that you selected for the SPF and DKIM modules are also on the\u00a0Require Any Of<\/i><\/b>–<\/i>list<\/li>\n<\/ul>\n<\/li>\n
                  • Click\u00a0Save Changes<\/b><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n","protected":false},"excerpt":{"rendered":"

                    User want to configure DKIM and DMARC in their Messaging Security Gateway<\/p>\n","protected":false},"template":"","support_article_product":[106],"class_list":["post-4179","support_article","type-support_article","status-publish","hentry"],"acf":{"source_foreign_id":"000005576","source_version":3,"source_system":"salesforce","source_date_updated":"2026-06-08 15:00:34","import_hash":"c3bf9548890130121f1905a4f0230bb6f6709146","vanilla_article_id":31164,"vanilla_url":"https:\/\/community.withsecure.com\/en\/kb\/articles\/31164-messaging-security-gateway-dkim-and-dmark-configuration","vanilla_kb_id":30,"vanilla_category_id":103,"machine_translated":false,"reactions_helpful_yes":0,"reactions_helpful_no":0},"_links":{"self":[{"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/support_article\/4179","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/support_article"}],"about":[{"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/types\/support_article"}],"wp:attachment":[{"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/media?parent=4179"}],"wp:term":[{"taxonomy":"support_article_product","embeddable":true,"href":"https:\/\/support.withsecure.com\/fr\/wp-json\/wp\/v2\/support_article_product?post=4179"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}