Salesforce DKIM Setup
DKIM (DomainKeys Identified Mail) is an authentication protocol that uses cryptographic signatures to ensure that email messages are not tampered with during transit and truly originate from your domain.
This guide outlines how to configure DKIM for Salesforce, a leading customer relationship management (CRM) platform that enables businesses to communicate effectively with customers through email and other channels.
Salesforce DKIM Requirements
Enable Signing and Publish Record
To enable DKIM signing on Salesforce requires access to a user account with the ‘Customize application’ and ‘Manage DKIM Keys’ authority.
- From Setup, enter DKIM Keys in the Quick Find box, and then select “DKIM Keys”.
- Click “Create New Key“.
- Select the RSA key size. Consider email recipient limitations and industry-specific security regulations when choosing the key size.
- For “Selector”, enter a unique name.
- For Alternate Selector, enter a unique name. The alternate selector allows Salesforce to auto-rotate your keys.
- Enter your domain name.
- Select the type of domain match you want to use.
- Click “Save”. Your CNAME and alternate CNAME records appear on the DKIM Key Details page when the DNS publication is complete.
- Publish the CNAME and alternate CNAME records to your domain’s DNS. If you use Sendmarc’s DKIM Management feature, you can save the keys there.
- Select “Activate” on the DKIM Key Details page.
How to update your DKIM settings using Sendmarc
To update your DKIM record through Sendmarc, please refer to the Sendmarc DKIM Setup Documentation.
Salesforce’s Documentation
Salesforce’s official DKIM configuration guide can be found here.
Looking for SPF Settings?
Find out how to configure your Salesforce SPF settings here.