DomainKeys Identified Mail (DKIM)
DomainKeys Identified Mail (DKIM) is a method of digitally signing your email messages to allow authentication. To protect customers from spam, many ISPs check the domain key in an email to determine whether it is spam.
When you're sending email from your NetSuite production account, using your own domain key helps enhance your reputation as a legitimate marketer.
As of NetSuite 2024.1, DKIM setup has changed. NetSuite generates the necessary information (including the naming of the selector) for customers to add two DNS CNAME records at their domain provider's website. These two CNAME records let Oracle NetSuite manage the rotation of DKIM keys. The rotation of DKIM keys is an important security feature.
Only one CNAME record has a DKIM linked. This is an expected behavior.
To create your own domain keys:
-
A user with an Administrator role (or the Full level of the Set Up Company permission) must go to the Email Preferences page in NetSuite and set up your email domain on the Email Domains (DKIM) subtab.
-
A person with DNS experience must use the information generated in NetSuite and go to the website of your domain provider to add two CNAME records to DNS.
After completing the setup in NetSuite and adding CNAME records to DNS at your domain provider, your domain keys will authenticate email messages sent from NetSuite.
This section contains the following topics:
DKIM keys aren't copied to your non-production accounts. You're not required to set up DKIM keys in non-production accounts, although it's possible. Based on the email preferences set in sandbox or Release Preview accounts, email is typically sent only to a specified list of addresses, or to the logged-in user. For more information, see Setting Preferences for Sandbox Email or Setting Preferences for Release Preview Email.