Edit Content

Welcome to Simploud Academy

Your one-stop hub for learning, troubleshooting, training, and staying updated with the latest features, resources, and news from Simploud.
Explore Trainings
Visit FAQs

DKIM Installation Guide

Introduction

This article is a technical implementation guide intended for IT administrators. It explains how to configure DKIM (DomainKeys Identified Mail) for Salesforce outbound email.

Prerequisites

Before starting, ensure the following:

  • A Salesforce user with access to Setup (Simploud Admin profile or equivalent administrative profile).
  • Administrative access to the company’s DNS hosting provider or email infrastructure (where DNS records are managed).

Domain Explanation

This guide uses simploud.com as the example domain because it is written for Simploud.

If you are implementing DKIM for another organization, replace simploud.com with your own company domain (for example: company.com).

All DNS records must be created under your organization’s authoritative DNS zone for your domain.

Step 1 – Create DKIM in Salesforce

1. Log in to Simploud.

2. Click the Gear icon (⚙) in the top right.

3. Click Setup.

4. In the left search bar, type: DKIM

5. Click DKIM Keys.

You should now see the DKIM configuration page.

Step 2 – Create the DKIM Key

Click Create New Key (or Edit if already created). Fill in the fields exactly like this:

Selector: sf1
Alternate Selector: sf2
Domain: simploud.com (your company’s domain)
Domain Match Pattern: simploud.com (your company’s domain)

Then click Save.

Step 3 – What Salesforce Should Generate

After saving, Salesforce should generate something like this:

Key Size: 1024/2048
Selector: sf1 Alternate Selector: sf2
Domain: simploud.com (your company domain)
Primary CNAME Record: sf1._domainkey.simploud.com IN CNAME sf1.f44cs5.custdkim.salesforce.com
Alternate CNAME Record: sf2._domainkey.simploud.com IN CNAME sf2.9qmz7l.custdkim.salesforce.com

Step 4 – DNS Configuration Required

Go to your DNS provider (Cloudflare, GoDaddy, Route53, etc.).

Create the following CNAME records:

 1) First Record (Primary):

Type: CNAME
Name / Host: sf1._domainkey.simploud.com
Value / Target: sf1.f44cs5.custdkim.salesforce.com
TTL: Default / Auto

2) Second Record (Alternate – Recommended):

Type: CNAME
Name / Host: sf2._domainkey.simploud.com
Value / Target: sf2.9qmz7l.custdkim.salesforce.com
TTL: Default / Auto

Important Notes:

– Some DNS providers require only the host portion (e.g., sf1._domainkey) and automatically append the domain.
– If the target ends with a dot (.), remove the final dot if your DNS UI rejects it.
– Do NOT create TXT records.
– Do NOT modify the Salesforce target value.
– Ensure you are editing the correct DNS zone: simploud.com.

Step 5 – Activate in Salesforce

After DNS records are created:

1. Wait 5–30 minutes (depending on DNS propagation).
2. Return to Setup → DKIM Keys in Salesforce.
3. Click Activate.
4. Once the V icon appears in the activated the drill is over.

If activation fails, verify:

– DNS record name is correct.
– DNS record value is correct.
– Record exists in the correct DNS zone.
– DNS has fully propagated.