DKIM 2048 bit key only effect on selector2

Question

DKIM 2048 bit key only effect on selector2

匿名

Dear experts,

I have configured the key rotate using the following command:

Rotate-DkimSigningConfig -KeySize 2048 -Identity {Guid of the existing Signing Config}

However, it only effect on selector2, which selector1 still on 1024 bit, does everyone know how can I upgrade key length on selector1 as well?

Thanks.

鎖定的問題。此問題已從 Microsoft 支援服務社群移轉。您可以對其是否有幫助進行投票，但無法對問題新增註解或回覆，或進行追蹤。

0 則留言

由問題作者接受的回答

匿名

Hi Alan Kung,

Thank you for sharing such information with us.

As per your mentioned description, generally as per official information article, Rotate-DkimSigningConfig cmdlet creates new DKIM keys and uses the alternate DKIM selector. Further, you don't need to use this cmdlet, because Microsoft 365 automatically rotates your DKIM keys. Here is the reference article Rotate-DkimSigningConfig

The new 2048-bit key will take effect in 4 days, and will send emails with the 1024-bit key in the interim.

On the other hand, we have shared such information via private message. So, please access this private message link https://answers.microsoft.com/en-us/privatemessage/inbox

Regards,

Darpan

0 則留言

2 個其他答案

Answer 1

匿名

Hi Vaidya,

Thank you so much for providing the information, I did follow the manually upgrade procedure from this article, the result shows as below, it says the key will be rotated on 2020/9/26, but selector1 still on 1024 bit today.

Thanks.

0 則留言

Answer 2

Hi Alan Kung,

Thank you for the posting in our forum community. We are very glad to help you here and we will try our best to provide you possible information from our end in the forum community.

As per your mentioned description about “DKIM”, please refer to this detailed information article Manually upgrade your 1024-bit keys to 2048-bit DKIM encryption keys, it will provide you some suitable information.

Hope the above information will work for you.

Regards,

Darpan