I have the error that when I try to enable DKIM verification that I get the error message that the DKIM settings cannot be deleted. I have read the post by Patel that this worked in 18.0.3 but is broken in 18.0.4 and will be fixed with 18.0.5.
I added the DKIM private key and selector for our domain and tested it with online DKIM tools. The DNS part is correct. Their error is that there is no DKIM signature header added to the email received send via the XG.
Is the signing part also broken in 18.0.4?
Thank you for contacting the Sophos Community!
I would recommend you to get a case open and get the patch applied for NC-60398, and the patch most likely will solve this issue.
I have contacted Sophos support. Gave them the NC Numbers (your NC number is different from that of Patel NC-67605 here community.sophos.com/.../cant-change-dkim-verification-settings---xg-v18-04-in-mta-mode ) but they have failed to come back with details on the fix. I have send them a reminder.
Thank you for the follow-up.
Actually, NC-60398 caused NC-67605, which is why I mentioned that one, but both of them are related anyway.
Can you share the Case ID?
the case ID is 03677152.
Thank you for the Case ID.
I have asked the engineer to escalate the case so DEV can apply the patch, let me know if you don't hear from him by tomorrow.
They added the patch today. The error in the GUI when changing the DKIM check settings is fixed.
I checked with dkimvalidator but the result is still that the DKIM signature is not added to outbound email. I have created a new case.
Thank you for the update.
Can you share the new Case ID you created.
The case number is 03729661.
Thank you for the Case ID, I have left a note. Let me know if you don't hear from the customer by tomorrow.
Case is solved. I recreated the keys and added them again to DNS and the XG. This time they are added and the result check out ok.
Thank you for the follow-up and for letting us what solved the issue.