1. Getting Started with Oracle Enterprise Performance Management Cloud for Administrators
  2. Setting Up EPM Cloud Environments
  3. DKIM Support for EPM Cloud OCI (Gen 2) Environments

DKIM Support for EPM Cloud OCI (Gen 2) Environments

Oracle Enterprise Performance Management Cloud on OCI (Gen 2) environments supports DKIM (DomainKeys Identified Mail). EPM Cloud email servers sign outgoing email messages using a private key. The receiving mail servers can then use a public key published on the oraclecloud.com DNS record to verify the signatures on the email messages from these EPM Cloud email servers.

Note:

Oracle's support for DKIM works for emails where the domain address is no.reply@oraclecloud.com or a custom email address. To request outgoing messages to use custom sender email address, see Request Custom Sender Email Address for OCI (Gen 2) Environments in Oracle Enterprise Performance Management Cloud Operations Guide ..

Get DKIM Selector Value

To find the DKIM public key from oraclecloud.com DNS record, use the DKIM Selector value referenced in the header information sent in the email. DKIM selector is referenced by header.s= VALUE where header.d is oracle.cloud.com.

For example, in the following header information of an email from sender domain no.reply@oraclecloud.com: 

Authentication-Results: ppops.net; 
spf=pass smptp.mailfrom=bounces+jane.doe=oracle.com@server.rp.exampleleemaildelivery.com; 
dkim=pass header.s=emaildelivery header.d=oracle.cloud.com; 
dkim=pass header.s=ACCOUNT_NAME header.d=server.rp.oracleemaildelivery.com; 
dmarc=pass header.from=oracle.cloud.com

DKIM selector value is emaildelivery.

Get Public Key

Using the DKIM Selector value (for example, emaildelivery) and the sender domain no.reply@oraclecloud.com, get the public key in the following ways:

  • Check DNS-related records from a website, for example https://www.mail-tester.com/spf-dkim-check.
  • Run the following command on Linux/ MAC OS command line: 
    dig domainSelectorValue._domainkey.oraclecloud.com TXT +short
Using the methods above, here is the public key for the DNS record for emaildelivery._domainkey.oraclecloud.co:
"k=rsa\;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Td5RdIXZ9SC4q49SCnB+iR7/TCmlnvu/54GMARLiik6lkF+h0C+Ek8z2UfPU3J/Nj+Rt+Q9Dvuvpdfzw/vfwE1yT4/ZdncRNzQ+rI5NfC6oi4F6X3ZpZ3sx0pu6TwAoJszeVzQTHS4xt4EhGeM" 
"hSaKMWTO23H7/5/4/7Je3zbt0VsPJ3zXArOOLiBS7TuN3RUAVh4CPDbmP2Ddzr6GWOkUzJq+lPH8tybOb/6jv5He2vVt35r/VUXEaotvQzo7h8eLTOe8AgmyCDYeLPOTWoPSiZ7KdJW0Cly5eP8WZJaT2beBeUzBB7x1q7a/vt5f4YwllcD8VC+zeK/64BSLQ5wIDAQAB"
Key length : 2048