Target

For customers using HENNGE Email DLP and desire to utilize the DKIM feature.

Purpose

To configure the DKIM setting on HENNGE Email DLP.

Cautions

This article is based on the product of May 2019 and may be revised without prior notice. 

FAQ

Q1.　
I have already enabled DKIM on Google Workspace / Microsoft 365, do I still need to set it up on HENNGE Email DLP?
A1.　
Since HENNGE Email DLP will likely modify the Email in the case of Email Attachment Encryption, this would render the DKIM Signature added in Microsoft 365/Google Workspace ineffective. Therefore, if the Email Attachment Encryption feature is enabled, we strongly recommend to setup DKIM on HENNGE Email DLP as well.

Q2.　
Is DKIM a necessary configuration?
A2.　
DKIM Signature is not mandatory, but some stricter Email Servers on the recipient side are likely to check whether the DKIM Signature is correctly setup. Please assess your situation considering your company's infrastructure as well as Information Security Requirements before this setup.

Procedures

1. Click on the [ Digital Signature ] → [ DKIM Setting ] in HENNGE Email DLP Admin Console and Choose the [ + ] button beside the [ Selector ].

2. The [ Create DKIM Selector ] Window will appear and please enter the information below.

・Selector Name: Please input any name that you desire for this selector.
・Key Length:  Please choose from [ 1024 Bits ] or  [ 2048 Bits ].

3. Once the DKIM Selector has been saved, please select the selector created, the TXT Record to be added to DNS will appear.

※ By default, the value [ t=y; ] tag will appear in the test mode, when utilizing this feature for production, please remove  [ t=y; ] from the value.

※To enable the DKIM-Signature for Multiple domains including sub-domain,
the TXT Record needs to be registered in DNS record for each domain.

4. After the TXT Record has been registered to the DNS, please enter the domain that the DNS was registered for into the [ Domain Names ] and press [ Apply ].

※DKIM-Signature will be applied for the domains which is registered in the "Domain Names" field.
To enable the DKIM-Signature for multiple domains including sub-domain,
Please register the additional domain in the "Domain Names" field with a new line as attached image.