How to connect the custom domain (purchesed from Azure) to Azure Email Communication Service

Question

I recently purchased a domain name name.net to use it in Azure's Email Communication Service. It successfully verified it in the DNS Zone by adding a TXT record of name @ as i want to use it as root domain doNotReply@name.net. Now, I want to set up SPF and DKIM.

I'm facing the following issues:

1. SPF Record: When I try to add the SPF TXT record with @ as the name (to use the root domain), I get the error: "There is already a record set with the same name in this DNS zone. To add another record with this name and type, modify the existing record set." However, I already have a TXT record with @ for domain verification. How can I add the SPF record in this case?
2. DKIM Record: When attempting to configure the DKIM record, I tried setting @ as the name field, but I received this error: "Each label must only contain letters, numbers, underscores, and/or dashes. Each label should be separated from other labels by a period. A wildcard ('' character) is permitted either as the single character in the name, or as the first label in the name. An empty value, or a single '@' character is permitted for record sets at the zone apex (except for CNAME record sets)."* Additionally, there's no field available to paste the DKIM value. What should I use as the name for the DKIM record if I want it to apply to my root domain?

The SPF record error:

The DKIM record error:

I would appreciate guidance on how to configure both SPF and DKIM correctly, especially with the constraints mentioned above. Please don't provide the documentation link. I've tried reading it several times and still don't understand how to proceed..

Thank you in advance!

Answer 1

@Alhanoof Aldossary Thanks for reaching out to Microsoft Q&A, apologize for any inconvenience caused on this.

I understand that you are trying to add the custom domain in Azure communication service and facing issue which configuring/verifying sender authentication to it.

As per the above shared screenshot I see that you are passing the name of the record set as '@' which is not accepted.

Can you follow/refer to this documentation to on how to configure sender authentication and what will the SPF and DKIM values.

Hope this helps ! let me know if you have any further questions on this.