IronPort - advanced configuration guide

Chapter 5 Email Authentication
OL-25137-01
Step 2 Enter a name for the profile, and the Domain Key type (DKIM). After you select the Domain Key type,
the Add Domain Profile page is displayed.
Figure 5-8 Add Domain Profile Page (DKIM)
Step 3 Enter the domain name.
Step 4 Enter a selector. Selectors are arbitrary names prepended to the "_domainkey." namespace, used to help
support multiple concurrent public keys per sending domain. A selector value and length must be legal
in the DNS namespace and in email headers with the additional provision that they cannot contain a
semicolon.
Step 5 Select the canonicalization for the header. Choose from the following options:
Relaxed. The “relaxed” header canonicalization algorithm performs the following: header names
are changed to lowercase, headers are unfolded, linear white spaces are reduced to a single space,
leading and trailing spaces are stripped.
Simple. No changes to headers are made.
Step 6 Select the canonicalization for the body. Choose from the following options:
Relaxed. The “relaxed” header canonicalization algorithm performs the following: empty lines are
stripped at the end of the body, white spaces are reduced to a single space within lines, and trailing
white spaces are stripped in lines.
Simple. Empty lines at the end of the body are stripped.
Step 7 Select a signing key (If you have already created a signing key, otherwise, skip to the next step). You
must create (or import) at least one signing key in order to have signing keys to choose from in the list.
See Creating New Signing Keys, page 5-11.
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
5-9