You already have one server with a dkim key pair and use virtualmin “DomainKeys Identified Mail”:
- Edit the dkim option on the source server and add the new domain (I personally use sub domains for all my servers) so for example if your initial mail server is s1.domain.com and your new server (the one you will copy the dkim key on) is s2.domain.com your “Domains to sign for” section must contain:
- Save this on the source server. The key will be updated….
- The private key on my ubuntu server is filed under: /etc/dkim.key
- If your target server is the same [OS], first of all proceed to enable DKIM on the virtualmin “DomainKeys Identified Mail”, you may want to use the same details than the source server in the “Domains to sign for” section & “Save”, this will create the key pairs.
- I personally then disabled dkim on the TARGET server before doing the next step, but it might not be required(!?).
- When complete, edit the /etc/dkim.key on the TARGET server with vi or otherwise replace the private key with the one from the SOURCE server (you should make a backup of the file first, always do a backup!).
- Go back to the virtualmin “DomainKeys Identified Mail” in the TARGET server page and enable the dkim outgoing email but with the option “Force generation of new private key?” to “NO” and “Save”
The private key will then be read from the /etc/dkim.key and used to generate the exact same public and DKIM DNS records for domains as the source server together with all the required settings to make it work.
You’re all set and the DNS can be edited if the DKIM DNS records for domains has changed, mine does not seem to have.