Symptoms
When using the Email Deliverability tool in WHM or cPanel you see yellow errors similar to the following:
DKIM
A “DKIM” record does not exist for this domain.
To properly configure your DKIM key, the record must use this server’s DKIM key.
This system does not control DNS for the “example.domain.tld” domain. You can install the suggested “DKIM” record locally. However, this server is not the authoritative nameserver. If you install this record, this change will not be effective. Contact the person responsible for the “remote1.nameserver.tld” and “remote2.nameserver.tld” nameservers and request that they update the “DKIM” record with the following:
SPF
A “SPF” record does not exist for this domain.
To properly configure your SPF record, you must include the following mechanisms:
ip4:xxx.xxx.xxx.xxx
This system does not control DNS for the “example.domain.tld” domain. You can install the suggested “SPF” record locally. However, this server is not the authoritative nameserver. If you install this record, this change will not be effective. Contact the person responsible for the “remote1.nameserver.tld” and “remote2.nameserver.tld” nameservers and request that they update the “SPF” record with the following:
Description
These problems occur whenever you are not using cPanel as the nameservers for your domain.
When you use cPanel nameservers it will automatically update and publish your domain's DKIM and SPF records so that your email works properly.
However, if you use a third-party service for DNS such as CloudFlare, cPanel is not able to access the third-party service to automatically update the SPF and DKIM records for you.
Resolution
You have 2 options for resolving these warnings:
1. You could switch to use cPanel as your name servers if you do not want to have to manually maintain these records at your third-party DNS provider. We have a guide for setting up nameservers for cPanel here:
How to Configure nameservers in a cPanel & WHM server
1. If you would prefer to keep your third-party DNS provider, you must copy the SPF and DKIM records shown in the Email Deliverability interface under the warnings mentioned above, and then enter them into your third-party DNS service. The steps required to update DNS at your third-party DNS provider depend on what company you are using. The best way to find out how to update those records in their interface is to contact their support, show them which records you need to change, and ask them what steps you need to take.
Step By Step For the Server's Hostname
DKIM
1. Login to WHM as the root user
2. Navigate to: Home »Email »Email Deliverability
3. Scroll to the DKIM section
4. Click the "Copy" link to the right of the name label
5. Login to your third party DNS provider's site and navigate to the location where you edit the DKIM record for your hostname
6. Paste the name portion of the record into your third party DNS editor
7. Go back to WHM and then click the blue "Copy" link next to the Value label
8. Go back to your third party DNS host interface and paste the Value into their editor
9. Scroll down to the SPF section
10. Click the blue "Copy" link next to the name for the SPF
11. Go back to your DNS host and paste the record into their editor
12. Go back to WHM and click the blue "Copy" button for the SPF value
13. Go back to your third party DNS host and paste the value into the editor
14. Save the record
You may then use the following tool to test both of your newly added SPF and DKIM records:
Step By Step For a Domain in a cPanel Account
1. Login to the cPanel account
2. Under the Email section, click on the Email Deliverability Icon
3. Click the "Manage" button for your domain
3. Scroll to the DKIM section
4. Click the "Copy" link to the right of the name label
5. Login to your third party DNS provider's site and navigate to the location where you edit the DKIM record for your hostname
6. Paste the name portion of the record into your third party DNS editor
7. Go back to WHM and then click the blue "Copy" link next to the Value label
8. Go back to your third party DNS host interface and paste the Value into their editor
9. Scroll down to the SPF section
10. Click the blue "Copy" link next to the name for the SPF
11. Go back to your DNS host and paste the record into their editor
12. Go back to WHM and click the blue "Copy" button for the SPF value
13. Go back to your third party DNS host and paste the value into the editor
14. Save the record
You may then use the following tool to test both of your newly added SPF and DKIM records: