{"id":1272,"date":"2021-06-11T08:22:38","date_gmt":"2021-06-11T08:22:38","guid":{"rendered":"https:\/\/prodmarc.com\/knowledge\/?p=1272"},"modified":"2023-01-31T07:28:52","modified_gmt":"2023-01-31T07:28:52","slug":"setting-up-dkim-for-on-prem-exchange-server","status":"publish","type":"post","link":"https:\/\/knowledge.progist.net\/index.php\/2021\/06\/11\/setting-up-dkim-for-on-prem-exchange-server\/","title":{"rendered":"Setting up DKIM for On-Prem Exchange Server"},"content":{"rendered":"

Out of the box On-Prem Exchange Server does not support DKIM signing. Now the best way to implement DKIM signing is via a third-party tool. <\/p>\n

Please refer to the below steps to configure the DKIM on on-prem exchange server.<\/p>\n

Installing Exchange DKIM Signer : <\/strong><\/p>\n

    \n
  1. Download the latest GUI package:<\/li>\n<\/ol>\n

    https:\/\/github.com\/Pro\/dkim-exchange\/releases\/latest<\/a><\/p>\n

      \n
    1. Extract it on your Server<\/li>\n
    2. Start Configuration.DkimSigner.exe (If you are not running this tool on Exchange Server, you will get below error)<\/li>\n<\/ol>\n

      \"\"
      \n\"\"
      \n\"\"<\/p>\n

      4. Select Install<\/strong><\/p>\n

      (This tool is tested on local machine due to which the \u201cTransport Service Status\u201d is showing as \u201cLoading\u201d and \u201cInstall\u201d option is greyed out.)<\/p>\n

      \"\"<\/p>\n

      5. Once the installer has completed, click close<\/strong>.<\/p>\n

      Configuration : <\/strong><\/p>\n

        \n
      1. Now configure the DKIM Signer with the installed GUI. Launch the configuration executable.<\/li>\n
      2. Click Configure<\/strong> and move the priority of the Exchange DkimSigner to 1 and then click<\/li>\n<\/ol>\n

        \"\"
        \n\"\"<\/p>\n

        3. Go to the DKIM Settings<\/strong> tab and change the Header & Body Canonicalization options to Relaxed<\/strong>. Click Save configuration<\/strong> to save your changes.<\/p>\n

        \"\"<\/p>\n

        4. Now go to the Domain Settings<\/strong> Add your Domain name<\/strong> and Selector<\/strong> and click Generate new key<\/strong>. DKIM Signer will then generate new public and private DKIM signing keys based on your domain and selector.<\/p>\n

        \"\"<\/p>\n

        A save window will open prompting you to save the newly generated key in “C:Program FilesExchange DkimSignerkeys”<\/strong>. Click Save<\/strong>.<\/p>\n

        5. Now you need to publish the DKIM TXT record for your domain(yourdomain.com) with your DNS provider. Copy Suggested DNS Name<\/strong> and the Suggested DNS Record<\/strong><\/p>\n

        \"\"<\/p>\n

        Share the copied details with your DNS provider as mentioned below<\/p>\n

        DNS record name :<\/strong> selector_2020._domainkey.yourdomain.com.<\/p>\n

        DNS record type :<\/strong> TXT<\/p>\n

        Value :<\/strong> v=DKIM1; k=rsa;<\/p>\n

        p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5\/ChZWGsnYUuEQO5qtSww fftXExtkcPf3MN1tRjuSmxQA6l1DBy7keetV3T3JlptaHpBEf+IowVRaIapk8s\/3RC89QhBLSdcf N\/6YPgNBc0SpXfHitzV75p7L3cSd2CE3ni5Nu8qRcC0yg91nT1MwzKzZad9bhlUrZlE2iMKKrKC c1EOEdnw0qD8+GNNAb3N4QM2WClRtqgOid7+FC0mPVxqbHfdK9Bt\/S4rYWjGNaOE\/SxL hCgkFFG6ar1DGm79p2bHb6+noOMvkYVvCR1YTCOhHbY3wt57OP\/BszG8r2fpVJ+MmtTJ 9XomRlyogFJ0tP4IPK317o+UlGkO8AlRQQIDAQAB<\/p>\n

          \n
        1. Wait for few minutes for the record to reflect, then go back to the DKIM Signer Domain Settings<\/strong> tab and click Check<\/strong>. DKIM Signer will query your DNS record and if it is reflected, your record should now be verified as correct. Click Save<\/strong> Domain<\/strong> to save your settings.<\/li>\n<\/ol>\n

          \"\"<\/p>\n

          7. Go back to the Information tab and restart the Exchange Transport Service by clicking on Restart<\/strong>.<\/p>\n

          \"\"<\/p>\n

          DKIM Signer is now configured to sign emails originating from your domain.<\/p>\n","protected":false},"excerpt":{"rendered":"

          Out of the box On-Prem Exchange Server does not support DKIM signing. Now the best way to implement DKIM signing is via a third-party tool.  Please refer to the below<\/p>\n

          Continue ReadingSetting up DKIM for On-Prem Exchange Server<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","om_disable_all_campaigns":false,"footnotes":""},"categories":[6],"tags":[39,100,114],"class_list":["post-1272","post","type-post","status-publish","format-standard","hentry","category-dkim","tag-dkim","tag-on-prem-exchange-server","tag-setting-up-dkim"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/posts\/1272","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/comments?post=1272"}],"version-history":[{"count":1,"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/posts\/1272\/revisions"}],"predecessor-version":[{"id":3004,"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/posts\/1272\/revisions\/3004"}],"wp:attachment":[{"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/media?parent=1272"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/categories?post=1272"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/knowledge.progist.net\/index.php\/wp-json\/wp\/v2\/tags?post=1272"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}