Getting DKIM working for Google Apps email - what is the domain key?

[TwistedHelixis]

I have been trying to get DKIM authentication working for my school but I am relying on our LA to enter the DNS entries.

 

I have,

 

Asked them to create a txt record with the following - v=spf1 include:_spf.google.com ~all

 

Asked them to enter a TXT record name of google._domainkey

 

Asked them to enter the really long txt and numbers (DKIM key) in to the TXT record value box.

 

I then wait 48 hours and click authenticate but it just errors - Email authentication was not verified. MY LA try something else and we then wait another 48 hours.

 

 

My question - is google._domainkey what they actually should be entering or should it be google._????????? something else?

 

I did call Google and I am not sure he understood what I was asking as he just kept saying they must enter google._domainkey, where I was trying to workout what domainkey actually was.

 

Really hope someone can point me / us in the right direction.

[DGardiner]

I have been trying to get DKIM authentication working for my school but I am relying on our LA to enter the DNS entries.

 

I have,

 

Asked them to create a txt record with the following - v=spf1 include:_spf.google.com ~all

 

Asked them to enter a TXT record name of google._domainkey

 

Asked them to enter the really long txt and numbers (DKIM key) in to the TXT record value box.

 

I then wait 48 hours and click authenticate but it just errors - Email authentication was not verified. MY LA try something else and we then wait another 48 hours.

 

 

My question - is google._domainkey what they actually should be entering or should it be google._????????? something else?

 

I did call Google and I am not sure he understood what I was asking as he just kept saying they must enter google._domainkey, where I was trying to workout what domainkey actually was.

 

Really hope someone can point me / us in the right direction.

 

the txt record should be named "google._domainkey" and have the contents of your dkim key from the google apps control panel set as the value.

 

be careful thought, iirc its easy to hit the wrong button and it will regenerate the key.

 

 

if it helps heres out entries on the dns:

 

 

 

SPF:

 

DKIM:

Edited October 11, 2017 by DGardiner

[the_quick]

might consider to buy alternative domain for your school. We first registered our google apps with our long winged domain e-sussex.sch.uk and than we have purchased .org domain. After that swapped on google to org to be primary and did all the changes to dns by ourselves on godaddy (our domain provider).

- it shortened our web address and email address significantly

- we managed our domain - which is much faster than LEA - same as you said, take ages for any changed on DNS to be applied

- it costed under £15 pa

 

Just an option for the future.

[ZeroHour]

I just turned this on for a test domain and it all worked fro me. You need to keep both parts as you have them in the console.

Are you sure your txt record is live?

NsLookup - Query the DNS for resource records can help check

Who is your external dns hosted through?

 

 

EDIT: I would personally host my DNS through Cloudflare, its free, supports 2FA and has one of the fastest DNS servers out there. You dont need to move your domain control, just ask them to update the nameservers to the cloudflare ones once you have setup and imported your records.

Edited October 11, 2017 by ZeroHour

[DGardiner]

might consider to buy alternative domain for your school. We first registered our google apps with our long winged domain e-sussex.sch.uk and than we have purchased .org domain. After that swapped on google to org to be primary and did all the changes to dns by ourselves on godaddy (our domain provider).

- it shortened our web address and email address significantly

- we managed our domain - which is much faster than LEA - same as you said, take ages for any changed on DNS to be applied

- it costed under £15 pa

 

Just an option for the future.

 

couldnt the authority just point the nameservers to route53 or something? then you control it?

[pete]

I'd echo the "take control of your external DNS away from the LA". You own the domain, so put DNS where you want. You'll just need the zone file so you can replicate the existing settings with the new provider.

[TwistedHelixis]

Taking control of our DNS services is something I will look at. Thanks for all the advice so far.

 

Still need to wait another 24 hours before I can test - lol

[DGardiner]

Taking control of our DNS services is something I will look at. Thanks for all the advice so far.

 

Still need to wait another 24 hours before I can test - lol

 

they have the ttl set that high?

 

https://mxtoolbox.com/dkim.aspx put in your domain, and the selector "google" and it should print your dkim key

[TwistedHelixis]

Still not working.

 

The LA sent me a screen grab and in the DKIM section it says google._domainkey.school.area.sch.uk

 

I said it should just have google._domainkey but they are saying it is adding the schools domain part automatically after google._domainkey.

 

I am starting to get a bald patch from pulling my hair out.

 

Any other advice I can give the LA. I assume that normally it does not add a domain after the Google section.

[DGardiner]

Still not working.

 

The LA sent me a screen grab and in the DKIM section it says google._domainkey.school.area.sch.uk

 

I said it should just have google._domainkey but they are saying it is adding the schools domain part automatically after google._domainkey.

 

I am starting to get a bald patch from pulling my hair out.

 

Any other advice I can give the LA. I assume that normally it does not add a domain after the Google section.

yes in dns it will auto append to the dns

 

dig google._domainkey.domain.tld TXT

 

 

our output is

 

as long as thats returning your key it should be good to go

Edited October 13, 2017 by DGardiner

[TwistedHelixis]

Well it took my LA 1 month to get DKIM up and running for me.