Create and Validate a BIMI TXT Record in UltraDNS

Overview

Brand Indicators for Message Identification, or BIMI, allows participating mailbox providers to display a brand logo with authenticated email messages.

UltraDNS does not use a separate BIMI record type. A BIMI configuration is published as a standard DNS TXT record.

This article explains how to add a customer-provided BIMI TXT record in the UltraDNS Managed Services Portal and confirm that UltraDNS returns the configured record.

Before You Begin

Obtain the following information from your BIMI, email-security, or certificate provider:

• The complete BIMI record name or host.
• The complete TXT value.
• The required TTL.

UltraDNS does not generate the BIMI record value. Use the exact information provided by the service responsible for your BIMI configuration.

BIMI TXT Record Format

A BIMI TXT record is normally published under a selector within the _bimi namespace.

The commonly used selector is default.

Example record name:

default._bimi.example.com

A BIMI TXT value may resemble the following example:

v=BIMI1; l=https://example.com/logo.svg;

Some BIMI values also contain an a= tag that references a mark certificate or other evidence document.

These examples are provided only to show the general format. Use the exact record name and value supplied by your provider.

Add the BIMI TXT Record

1. Log in to the UltraDNS Managed Services Portal.
2. Select Domains.
3. Select the domain where the BIMI record must be created.
4. Open the TXT record creation form:
   • In Grouped View, locate the TXT (Text) section and select Add Record.
   • In Table View, select Add Record, then select TXT.
5. Enter the BIMI host or record name provided by your provider.
6. Enter the complete TXT value.
7. Enter the required TTL.
8. Select Save.

Validate the DNS Record

After the record is created, query an authoritative UltraDNS nameserver to confirm that it returns the configured TXT value.

Example:

dig TXT default._bimi.example.com @<authoritative-nameserver>

Compare the response with the record in the UltraDNS portal:

• Confirm that the record name is correct.
• Confirm that the TXT value matches the configured value.
• Confirm that the returned TTL matches the configured TTL.

Expected Outcome

The authoritative UltraDNS nameservers return the BIMI TXT record exactly as it is configured in the UltraDNS portal.

A successful DNS response confirms that UltraDNS is serving the TXT record. It does not confirm that the complete BIMI configuration is valid or that a mailbox provider will display the logo.

The BIMI Record Does Not Resolve

Check the following:

• The record was created in the correct UltraDNS domain.
• The complete record name is correct.
• The selector and _bimi label are included.
• The domain is delegated to the expected UltraDNS nameservers.
• The DNS test is querying an authoritative nameserver.

The Record Resolves but the Logo Is Not Displayed

If the authoritative UltraDNS response matches the configured TXT record, the UltraDNS DNS configuration is working as configured.

A mailbox provider may apply additional BIMI, email-authentication, logo, certificate, or eligibility requirements before displaying a logo.

Continue troubleshooting with the provider responsible for your BIMI configuration, email authentication, logo hosting, mark certificate, or receiving mailbox service.

Important Notes

• BIMI commonly depends on an existing SPF, DKIM, and DMARC configuration.
• The logo file must meet the requirements defined by your BIMI or mailbox provider.
• A mark certificate may be required by the receiving mailbox provider.
• Each mailbox provider determines whether a BIMI logo is displayed.
• Do not change individual BIMI tags unless your provider supplies a complete replacement TXT value.