DKIM Management

DKIM Management is included as part of the DMARC add-on.

DKIM records ensure emails are cryptographically signed to verify their authenticity and integrity.

Benefits

• Prevents email spoofing.

• Simplify DKIM management without needing to update records at your DNS provider every time.

• Configure DKIM settings directly in your Harmony Email & Collaboration Administrator Portal.

• Seamlessly integrate with the DMARC solution for ongoing monitoring and issue resolution.

High-Level Procedure

1. Add the required selectors through the Harmony Email & Collaboration Administrator Portal. See Adding New DKIM Selector to your Domain.

2. Activate DKIM Management by updating the domain's DNS NS record with the required value. See Activating DKIM Management.

3. Check Point manages selectors for each domain.

4. Modify selectors as needed through the Harmony Email & Collaboration Administrator Portal. See Managing Selectors.

5. Check Point ensures seamless operation, eliminating the need to update DKIM records in your DNS every time.

Reviewing the DKIM Status of your Domains

The DKIM Management page shows a list of all the organization's protected domains and sub-domains.

To view the DKIM Management page, access the Harmony Email & Collaboration Administrator Portal and click DMARC > DKIM Management.

Column	Description
Domain	Domain name.
DKIM Monitoring	Monitoring status of the domain. Managed - Check Point manages your DKIM. Pending - The Check Point DKIM is not yet active. To activate it, update your domain's NS record in your DNS. Note - DNS records may take some time to propagate across the internet. Not Managed - The Check Point does not host your domain's DKIM record yet.
DKIM% Success	The percentage of emails that pass DKIM out of the total number of reported emails sent by the domain.
Managed Selectors	Number of managed selectors in the domain.
Last updated	The date and time of the last update.
Hosted Name Servers	Names of the hosted servers.

Activating DKIM Management

Harmony Email & Collaboration allows an unlimited number of DKIM entries to be defined.

To activate DKIM Management for Harmony Email & Collaboration:

1. Add all your selectors to the domain's DKIM Management page. See Adding New DKIM Selector to your Domain.

2. If required, insert DNS NS records for your subdomains.

3. Click Save & Update to activate the selectors.

   Once the selectors are activated, the system shows your Name Servers.

4. Harmony Email & Collaboration verifies the updated DNS NS record and activates DKIM Management.

Adding New DKIM Selector to your Domain

To manually add a new DKIM selector to your domain:

1. On the DKIM Management page, click the domain to which you need to add a selector.

2. Click Insert Selector next to the Instructions at the top of the page.

3. In the pop-up that appears, enter a unique selector name in the Selector field.

4. In the Type CNAME/TXT field, select the required option from the list.

   • CNAME: URL to another domain

   • TXT: DKIM public key

5. In the Value field, enter the value relevant to the selected Type CNAME/TXT.

6. (Optional) In the Notes field, enter the description as required.

7. In the Service field, enter the service that the selector is used for.

8. (Optional) Select the t=s? checkbox to support only exact domain signing.

   If you select this checkbox, the DKIM signature is valid only for the exact domain in the record.

   For example, if you select this checkbox and the domain is example.com, any email sent from sales.example.com will not pass DKIM validation using the existing key for example.com. To enable DKIM for sales.example.com, you must add a separate DKIM record.

9. Click OK.

Managing Selectors

You can manage your authorized selectors as required. To do that, click the icon from the last column of the Selectors table.

• To insert the selector, click Insert selector Above / Below. In the pop-up that appears, select the required options and click OK.

  You can also click Insert Selector directly next to the Instructions at the top of the page. In the pop-up that appears, select the required options and click OK.

• To delete a selector, click Delete Selector. In the confirmation pop-up that appears, click OK.

• To update the selector, click Update Selector. In the pop-up that appears, make the necessary changes and click OK.

After making the changes, click Save & Update to generate the DKIM record based on the configured selectors.

Column	Description
Status	Status of the selector. - Active - Non-Active
Selector	Unique name of the selector.
Type	Type of the element.
Value	Value of the CNAME/TXT.
Notes	Description of the selector.
Service	Name of the service.
t=s	Status of the selector to support only exact domain signing. True False
Warnings	Description of the warnings, if any.