Enable DKIM in Office 365

Microsoft has made it very easy to use DKIM, basically you only need to create two CNAME DNS records and enable DKIM in Office 365.

DKIM DNS records

To enable DKIM in Office 365 you first need to create two dns CNAME records.

The records should look like this:

Where .domain.com is the domain for which you want to enable DKIM. Therefore you should replace the domain.com part with your own domain.

These CNAME records value should point to:

The “domain-com” part is also known as the DomainGUID.
The “yourdomain.onmicrosoft.com” part is your tenant name.

So for my environment the two records will be:

You can use a site like dmarcian of mxtoolbox to check your DKIM selector records:

The next step is to enable DKIM in your Office 365 environment.
This can be done using powershell or in the Exchange Admin Center.
The powershell cmdlet is:

In the Exchange Admin Center select Protection and then the DKIM tab.
Select the domain for which you want to enable DKIM and click enable.


If you do not have the option to enable your DKIM config but instead it reads:
Status: No DKIM keys saved for this domain.

Then check out my other blog (Status: No DKIM keys saved for this domain) for help on how to fix this issue.

I hope this was informative. For questions or comments you can always give a reaction in the comment section or contact me:

One thought on “Enable DKIM in Office 365

Leave a Reply

Your email address will not be published.

This site uses Akismet to reduce spam. Learn how your comment data is processed.