How to enable DKIM for Office 365 Domain

Create 2 CNAME records for a custom domain in DNS

1. You need to add 2 CNAME entries for any domain you want to add DKIM signing for.
2. Use the following CNAME records:
   1. Hostname: selector1._domainkey
      Points to address or value: selector1-<domainGUID>._domainkey.<initialDomain>
      TTL: 3600
      Hostname: selector2._domainkey
      Points to address or value: selector2-<domainGUID>._domainkey.<initialDomain>
      TTL: 3600
3. In the example above:
   • For Microsoft 365, the selectors will always be "selector1" or "selector2".
   • domainGUID is the same as the domainGUID in the customized MX record for your custom domain that appears before mail.protection.outlook.com. For example, in the following MX record for the domain goingipo.com, the domainGUIDis goingipo-com:

     goingipo.com. 3600 IN MX 5 goingipo-com.mail.protection.outlook.com

   • initialDomain is the domain that you used when you signed up for Microsoft 365.
4. For example, if you have an initial domain of goingipo.onmicrosoft.com, and a custom domain goingipo.com, you would need to set up two CNAME records for the additional domain:
   Hostname: selector1._domainkey
   Points to address or value: selector1-goingipo-com._domainkey.goingipo.onmicrosoft.com
   TTL: 3600
   Hostname: selector2._domainkey
   Points to address or value: selector2-goingipo-com._domainkey.goingipo.onmicrosoft.com
   TTL: 3600

Enabling DKIM Signing in O365 for domain

1. In the Office 365 Admin center, select Exchange

   

2. Go to protection-> dkim

   

3. 

4. Click on the domain for which you'd like to enable DKIM.  For Sign messages for this domain, click Enable