Commands › Exchange Online

Set-DkimSigningConfig

Exchange Online ExchangeOnlineManagement Set-*

Modify the DomainKeys Identified Mail (DKIM) signing policy settings for domains in a cloud-based organization.

Quick start script

# Set-DkimSigningConfig — quick start (serv365.ai)
# 1. Connect (app-only shown; interactive: omit the certificate parameters)
Connect-ExchangeOnline -CertificateThumbprint $thumb -AppId $appId -Organization $org

# 2. Capture the current state first — you cannot roll back what you never recorded
$before = Get-DkimSigningConfig
$before | Format-List

# 3. Make the change (dry run first)
Set-DkimSigningConfig -Identity <DkimSigningConfigIdParameter> -WhatIf
Set-DkimSigningConfig -Identity <DkimSigningConfigIdParameter>

# 4. Verify and diff
$after = Get-DkimSigningConfig
Compare-Object ($before | Out-String) ($after | Out-String)

Syntax

Set-DkimSigningConfig [-Identity] <DkimSigningConfigIdParameter>
 [-AdminDisplayName <String>]
 [-BodyCanonicalization <CanonicalizationType>]
 [-Confirm]
 [-Enabled <Boolean>]
 [-HeaderCanonicalization <CanonicalizationType>]
 [-PublishTxtRecords]
 [-WhatIf]
 [<CommonParameters>]

Parameters (8)

Parameter	Type	Required	What it controls
-Identity	DkimSigningConfigIdParameter	yes	The Identity parameter specifies the DKIM signing policy that you want to modify. You can use any value that uniquely identifies the policy. For example:
-AdminDisplayName	String		The AdminDisplayName parameter specifies a description for the policy. If the value contains spaces, enclose the value in quotation marks (").
-BodyCanonicalization	CanonicalizationType		The BodyCanonicalization parameter specifies the canonicalization algorithm that's used to create and verify the message body part of the DKIM signature. This value effectively controls the sensitivity of DKIM to...
-Confirm	SwitchParameter		The Confirm switch specifies whether to show or hide the confirmation prompt. How this switch affects the cmdlet depends on whether the cmdlet requires confirmation before proceeding.
-Enabled	Boolean		The Enabled parameter specifies whether the policy is enabled. Valid values are:
-HeaderCanonicalization	CanonicalizationType		The HeaderCanonicalization parameter specifies the canonicalization algorithm that's used to create and verify the message header part of the DKIM signature. This value effectively controls the sensitivity of DKIM to...
-PublishTxtRecords	SwitchParameter		The PublishTxtRecords switch publishes the required data for the selected domain so the correct DKIM records can be created in DNS. You don't need to specify a value with this switch.
-WhatIf	SwitchParameter		The WhatIf switch shows what the command does without making any changes. You don't need to specify a value with this switch.

Reference facts derived from Microsoft documentation, © Microsoft, licensed CC BY 4.0; restructured with original guidance by serv365.ai.