IronPort - advanced configuration guide

Creating Domain Profiles for DomainKeys Signing
5-8
To create a new domain profile for DomainKeys signing:
Step 1 Click Add Profile on the Domain Profiles page.
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
Chapter 5 Email Authentication
Step 2 Enter a name for the profile, and the Domain Key type (DomainKeys). After you select the Domain Keys
type, the Add Domain Profile page is displayed.
Figure 5-7 Add Domain Profile Page (DomainKeys)
Step 3 Enter the domain name.
Step 4 Enter a selector. Selectors are arbitrary names prepended to the "_domainkey" namespace, used to help
support multiple concurrent public keys per sending domain. A selector value and length must be legal
in the DNS namespace and in email headers with the additional provision that they cannot contain a
semicolon.
Step 5 Select the canonicalization (no forwarding whitespaces or simple).
Step 6 Select a signing key (If you have already created a signing key, otherwise, skip to the next step). You
must create (or import) at least one signing key in order to have signing keys to choose from in the list.
See Creating New Signing Keys, page 5-11.
Step 7 Enter users (email addresses, hosts, etc.) that will use the domain profile for signing.
Step 8 Click Submit.
Step 9 Click the Commit Changes button, add an optional comment if necessary, and then click Commit
Changes to finish adding the new domain profile.
Step 10 At this point (if you have not already) you should enable DomainKeys/DKIM signing on an outgoing
mail flow policy (see Enabling Signing for Outgoing Mail, page 5-6).
Creating Domain Profiles for DKIM Signing
To create a new domain profile for DKIM signing:
Step 1 Click Add Profile on the Domain Profiles page.
OL-25137-01