DomainKeys Identified Mail (DKIM)

DomainKeys Identified Mail (DKIM) is a method of digitally signing your email messages to allow authentication. To protect customers from unsolicited email, many ISPs check the domain key used in an email message to determine whether it is spam.

When sending email from your NetSuite production account, using your own domain key helps enhance your reputation as a legitimate marketer.

Important:

As of NetSuite 2024.1, DKIM setup has changed. NetSuite generates the necessary information (including the naming of the selector) for customers to add two DNS CNAME records at their domain provider's website. These two CNAME records let Oracle NetSuite manage the rotation of DKIM keys. The rotation of DKIM keys is an important security feature.

To create your own domain keys:

After completing the setup in NetSuite and adding CNAME records to DNS at your domain provider, email messages you send from NetSuite will be authenticated by your domain keys.

This section contains the following topics:

Note:

Be aware that DKIM keys are not copied to your non-production accounts. It is possible, but not necessary, to set up DKIM keys in NetSuite accounts other than your production account. Based on the email preferences set in sandbox or Release Preview accounts, email is usually delivered only to a specified list of email addresses, or to the logged-in user. For more information, see Setting Preferences for Sandbox Email or Setting Preferences for Release Preview Email.

Related Topics

Opportunistic TLS and NetSuite Email
Size Limits for Emails and Attachments
Email Blocklists and Spamlists
Scriptable Templates
DMARC-Compliant Messaging in NetSuite

General Notices