Series: Use the organization email domain name

Perform DKIM authentication


Prerequisites
  • Routing > Email > Manage permission

Optionally set up extra customization for sending and receiving email, including DKIM authentication. Configuring DKIM authentication helps prevent outbound email routed through your custom domain from being marked as spam.

Note:s
  • DKIM is a type of email authentication that generates a signature for the outbound email. This signature shows senders that the message is legitimate and was not been modified in transit. Having authenticated emails increases deliverability. For more information about DKIM authentication, see Authenticating your email in Amazon SES and DKIM frequently asked questions.
  • Amazon SES automatically adds a 1024-bit DKIM key to every email you send from your domain. For more info see the AWS article, Easy DKIM in Amazon SES.

When you create your domain, Genesys Cloud automatically generates DKIM records. You can set up DKIM anytime. To set up DKIM authentication, add the provided records to your domain’s Domain Name System (DNS). Each record contains a set of unique tokens retrieved for a domain through the SES. This information is unique for each domain.

Note: In the following example, Genesys Cloud replaces support.company.com with your domain name.
Name Type Value
UNIQUE_TOKEN_1._domainkey.support.company.com CNAME “UNIQUE_TOKEN_1.dkim.amazonses.com”
UNIQUE_TOKEN_2._domainkey.support.company.com CNAME “UNIQUE_TOKEN_2.dkim.amazonses.com”
UNIQUE_TOKEN_3._domainkey.support.company.com CNAME “UNIQUE_TOKEN_3.dkim.amazonses.com”
Note: This article includes the general process DNS providers typically use to add DKIM records to your domain’s Domain Name System. The procedure you use can differ, depending on your DNS service provider. 
  1. In Genesys Cloud, copy the DKIM records:
    1. Click Admin.
    2. Under Contact Center, click Email. The Manage Domains page opens.
    3. Locate the organization’s email domain and click Edit. The Domain Verification page opens.
    4. Click Show Advanced Settings.
    5. Under DKIM Authentication, copy the DKIM records.
  2. In your DNS provider’s website, sign in and navigate to the page for updating your domain’s DNS records. 
  3. Follow your provider’s instructions for adding DKIM records.
    Note: When Genesys Cloud verifies the records, the Pending Verification message changes to Verified and outbound emails use DKIM.

When SES verifies the records, outbound emails use DKIM. If you do not set up DKIM, or if the process fails, Amazon SES still sends your email. However, the email is not signed using a DKIM signature.

Note: If verification fails, click Refresh to regenerate tokens.