To send email from your NetSuite account, every domain and each subdomain must have a separate selector set up in NetSuite, and a separate DNS record. Before Friday September 15, 2023, you should follow the Required Actions below if you intend to keep sending email from a subdomain that shares the same selector as your domain.
What is Changing?
Oracle NetSuite is notifying customers who are currently operating with relaxed DKIM alignment that this configuration is not supported.
It is no longer possible to set up relaxed DKIM alignment in NetSuite, where subdomains share the same Domain Keys as the domain.
What do we mean by relaxed DKIM alignment? To illustrate:
Each of these subdomains should have a separate selector in NetSuite and their own records in DNS.
Relaxed DKIM alignment means that the subdomains are operating under the same selector as the domain.
Note: You cannot see the subdomains in your NetSuite account or in your DNS records. If you need help identifying the relaxed DKIM subdomains in your account, contact NetSuite Customer Support.
Required Actions
You do not need to take any action if you do not intend to send email from your subdomains. For each subdomain from which you want to continue to send email:
- A user with an Administrator role or a user with the Full level of the Set Up Company permission should log in to NetSuite.
- Create a new selector and domain keys for each subdomain. See Enter Domain Keys in NetSuite, SuiteAnswers ID 102929.
- Important: Do not check the Active box for the selector.
- Create and publish a DNS TXT record for this subdomain. See Set Up a DNS Text Record, SuiteAnswers ID 102930. Also, refer to the help on your domain provider’s website for more information about setting up and publishing a DNS TXT record.
- Click Verify DNS Entry to confirm that DKIM is set up correctly in NetSuite.
- Note: The DNS TXT record can be verified even though the selector is not active.
Please prepare the new selectors and DNS TXT records before Friday September 15, 2023. On that date, Oracle NetSuite will activate the new Domain Key selectors for your subdomains. It will take several hours for the changes to take effect. During this time, the FROM headers may be rewritten for email sent from these subdomains. That is, the FROM header may include <system@sent–via.netsuite.com>.
To understand the effect it can have if you do not take these required actions by September 15, 2023, see From Headers in Email Can Be Rewritten, SuiteAnswers ID 103008.