ZCS Administrator Guide 8.0
ZCS Administrator Guide 8.0
Open Source Edition


Managing Configuration > Configure ZCS for DKIM Signing

Configure ZCS for DKIM Signing
DKIM signing to outgoing mail is done at the domain level. To set up DKIM you must run the CLI zmdkimkeyutil to generate the DKIM keys and selector. You then update the DNS server with the selector which is the public key.
1.
/opt/zimbra/libexec/zmdkimkeyutil -a -d <example.com>
The public DNS record data that must be added for the domain to your DNS server is displayed. The public key DNS record appears as a DNS TXT-record that must be added for the domain to your DNS server.
Optional. To specify the number of bits for the new key, include -b in the command line, -b <####>. If you do not add the -b, the default setting is 1024 bits.
 
The generated DKIM data is stored in the LDAP server as part of the domain LDAP entry.
2.
3.
4.
/opt/zimbra/opendkim/sbin/opendkim-testkey -d <example.com> -s <0E9F184A-9577-11E1-AD0E-2A2FBBAC6BCB> -x /opt/zimbra/conf/opendkim.conf
Copyright © 2012 VMware Inc.