How to Configure DKIM and DMARC Email Signing in SmarterMail

Step 1: Enable DKIM Signing in SmarterMail

1. Log on to Smartermail web interface as 'admin' or domain administrator.

2. Go to the Manage page of a specific domain.

3. Expand 'Advanced Settings' and click 'Mail Signing', make sure 'Enable DKIM Signing' is checked.
   

4. Click 'Certificate' and type 'default' as the selector, make sure the key size is set to 2048, then click 'Generate Key'. The name and the value of the new TXT record will be generated. Click 'Save' to store the DKIM key in the mail server. You may also generate the DKIM key elsewhere and paste it here. It is important to have the same key in the name servers of the domain and the mail server.
   

Step 2: Create TXT Records for DKIM in DNS

1. Go to the DNS server and then click the domain name to create new TXT records. Right-click the domain name in the left panel or the empty area in the right panel, then click 'New Domain'.
   

2. Type "_domainkey" as the name of the new domain.
   

3. Enter the new domain, right-click the empty area to create a new TXT record.
   

4. Create a no-name TXT record with the value "o=". This is for policy for the domain. "o=" means some e-mails coming from this domain are signed.
   

5. Create another TXT record with the name of "default". Then paste the TXT record value from Step 1.4. However, there is a length limit for the value, for being be to save the whole value, split the value into multiple lines.
   

Step 3: Create DMARC Record

Move back to the top-level domain, then create a new TXT record named "_dmarc". The email addresses to be included in the record value must be valid ones.Record name must be _dmarc ; Record value: v=DMARC1; p=reject; sp=reject; rua=mailto:user@domain.com; ruf=mailto:user@domain.com; rf=afrf; pct=100; ri=86400

Step 4: Email Delivery Test

Send an email to your Gmail account. When the email is received, view the original email content, and you should see something like the following.