SPF(supported) (dedicated subdomain)
DKIM(recommended)



This article covers the SPF and DKIM authentication processes for ARMS and how they are managed in Valimail Enforce. Because this service leverages Sendgrid's email infrastructure, it requires additions to your DNS records outside of the Valimail platform. Adding ARMS as an authorized sender in the Valimail Enforce usually requires a dedicated subdomain to be pointed to the Sendgrid infrastructure and typically the DKIM keys will be added in the Valimail platform.



TABLE OF CONTENTS





Configuring DKIM authentication for your ARMS emails


ARMS can generate a unique Domain Key which you can add to your DNS records. This will allow ARMS to digitally sign emails on behalf of your organization.


In order to setup DKIM in ARMS for your domain, please reach out to ARMS Support at help@armssoftware, or (855) 215-2767.


They will provide you with 3 CNAME records - one you will add in your DNS and the 2 CNAME DKIM records you will add on your domain's Configuration page in Valimail Enforce. 


Example records:


(in DNS)

Record Name: em5865.yourdomain.com

Record Type: CNAME

Record Value: u308154.wl152.sendgrid.net.


(In Valimail)

DKIM selector: arm

CNAME Value: arm.domainkey.u308154.wl152.sendgrid.net.


DKIM selector: arm2

CNAME Value: arm2.domainkey.u308154.wl152.sendgrid.net.




You can also find the instructions on how to set up DKIM and SPF for ARMS, here.






Add an ARMS DKIM key in Enforce


1. Go to your domain's Configuration page in Valimail Enforce and publish the newly created DKIM key.


    a. Scroll down and add the two DKIM keys in your configuration, by clicking on Add a DKIM key. 

    b. Enter the selector name, CNAME target value, associate the key/s with ARMS and then click Add.




You can find more detailed information on how to add a DKIM key in Valimail Enforce here. 






Configuring SPF authentication for your ARMS emails


Once you establish that ARMS is an authorized sender for your domain, you will need to add the service in your Enabled Senders list in Enforce.


1. Please go to your domain's Configuration page in Enforce.

2. Click on the + sign from the Enabled Senders section:



3. Choose ARMS from the list of configurable senders and then click Enable:




We encourage you to use the comment section for any useful information about your sending service, such as the name of the service owner, change request ticket numbers, etc.






As always, if you have any questions, please don't hesitate to submit a ticket.