Commands › Exchange Online

Rotate-DkimSigningConfig

Exchange Online ExchangeOnlineManagement Rotate-*

Rotate the public and private DomainKeys Identified Mail (DKIM) signing policy keys for domains in a cloud-based organization. This cmdlet creates new DKIM keys and uses the alternate DKIM selector.

Quick start script

# Rotate-DkimSigningConfig — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Run and inspect
Rotate-DkimSigningConfig -Identity <DkimSigningConfigIdParameter> | Format-List

# 3. Export for evidence / drift tracking
Rotate-DkimSigningConfig | Export-Clixml .\DkimSigningConfig-$(Get-Date -Format yyyyMMdd).xml

Syntax

Rotate-DkimSigningConfig [-Identity] <DkimSigningConfigIdParameter>
 [-Confirm]
 [-KeySize <UInt16>]
 [-WhatIf]
 [<CommonParameters>]

Parameters (4)

Parameter	Type	Required	What it controls
-Identity	DkimSigningConfigIdParameter	yes	The Identity parameter specifies the DKIM signing policy that you want to rotate. You can use any value that uniquely identifies the policy. For example:
-Confirm	SwitchParameter		The Confirm switch specifies whether to show or hide the confirmation prompt. How this switch affects the cmdlet depends on whether the cmdlet requires confirmation before proceeding.
-KeySize	UInt16		The KeySize parameter specifies the size in bits of the public key that's used in the DKIM signing policy. Valid values are:
-WhatIf	SwitchParameter		The WhatIf switch shows what the command does without making any changes. You don't need to specify a value with this switch.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.