DomainKeys Identified Mail (DKIM)

DomainKeys Identified Mail (DKIM) is a method of digitally signing your email messages to allow authentication. To protect customers from spam, many ISPs check the domain key in an email to determine whether it is spam.

When you're sending email from your NetSuite production account, using your own domain key helps enhance your reputation as a legitimate marketer.

Important:

As of NetSuite 2024.1, DKIM setup has changed. NetSuite generates the necessary information (including the naming of the selector) for customers to add two DNS CNAME records at their domain provider's website. These two CNAME records let Oracle NetSuite manage the rotation of DKIM keys. The rotation of DKIM keys is an important security feature.

Only one CNAME record has a DKIM linked. This is an expected behavior.

To create your own domain keys:

After completing the setup in NetSuite and adding CNAME records to DNS at your domain provider, your domain keys will authenticate email messages sent from NetSuite.

This section contains the following topics:

Note:

DKIM keys aren't copied to your non-production accounts. You're not required to set up DKIM keys in non-production accounts, although it's possible. Based on the email preferences set in sandbox or Release Preview accounts, email is typically sent only to a specified list of addresses, or to the logged-in user. For more information, see Setting Preferences for Sandbox Email or Setting Preferences for Release Preview Email.

Related Topics

General Notices