How do I configure a domain key on an Ecessa device?

This document assumes knowledge of Authoritative DNS. To learn more about DNS on the Ecessa, visit Inbound Load-Balancing and Authoritative DNS

Adding a domain key is quite simple. In this example, three domain keys will be added to the Ecessa device. The domain keys are listed below for the domain apple.example.

_domainkey.apple.example                 TXT               o=~                             

_policy._domainkey.apple.example   TXT                 o=~                             

key1._domainkey.apple.example         TXT              g=*; k=rsa; p=MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALoqmxmBdt3D1CBe2fPj+9JoQMF4ECOrlVyGsnl+t1VrBVUvZTyNRrAt/6fcmQJL7rZ6ANTlgONQKz+7TnAmwc0CAwEAAQ==               

Go to Authoritative DNS and click Configure next to the domain that is to be configured.

In the domain configuration page, scroll to the bottom of the page for the TXT record section. Enter the domain keys. Please note that the Owner field is optional. Click Activate to save the changes.

Testing DNS resolution

To confirm the key is resolving properly, use the dig or nslookup utilities to query the Ecessa device or a public name server. For the following examples, the Ecessa device is getting queried to resolve the key1._domainkey record.

Using dig:

dig @ns1.apple.example key1._domainkey.apple.example TXT

Using nslookup:

nslookup -type=txt key1._domainkey.apple.example ns1.apple.example