Extole DNS Requirements

Setting Up Branded URLs

Set up your domain so that links generated and shared are branded with your identity.

There are two places where branded links are important:

• Promotion Links: These are the links you create to promote your program through outbound promotions via email, social media, and other marketing channels (e.g., refer.mycompany.com/newsletter).
• Share Links: These are the links your advocates share with their friends (e.g., refer.mycompany.com/s/lbarnett).

The most common option is to use subdomains of your main brand domain. For example, If your company website is at mycompany.com then the most common branded domains are:

• Promotion Links: share.mycompany.com
• Share Links: share.mycompany.com/s/

🚧

Important Note

Your branded domain must be a domain that points to the Extole servers directly, such as share.mycompany.com. It cannot be a path like www.mycompany.com/share.

Create CNAMEs for Your Domains

Setting up a branded domain will require your IT organization to create CNAMEs for your domains and generate certificates.

To set up your CNAME, complete the following steps:

1. Get your current Extole Program Domain. You can find this in the My Extole Tech Center. It will be listed in the Program Domains section. Typically your unbranded domain will look like "mycompany.extole.io". If you cannot locate your domain, contact your CSM.
2. Log into your domain registrar's control panel and create a CNAME record from your Branded Program URL to the Extole Program Domain. The UI and terminology may vary depending on your registrar. You will point refer.mycompany.com to mycompany.extole.io.
3. Once you have created your branded domains, go back into Tech Center and create a New Domain.

Example DNS update:

share.mycompany.com. 86400 IN	CNAME	mycompany.extole.io.

📘

Corporate DNS versus Public DNS

Many companies have a separate DNS server that runs inside the company to help support things like a corporate intranet. If this is the case, the CNAME needs to be applied to both the public DNS and the corporate DNS.

If you find your program works correctly on your phone and over public WiFi, but does not work when you are at the office, then this is probably the case.

Certificates for Your Branded Domain

Once your CNAME is set up, Extole will automatically generate a certificate for your domain from Let's Encrypt. These certificates expire every three months so Extole will the automatically renew the certificate each quarter and keep it active for your campaign.

Setting Up Your Own SSL Certificate (Optional)

If you'd like to create your own certificate, you may do this by fully creating and uploading your own.

After purchasing an SSL certificate from a Certificate Authority, in most cases they'll send you an email or direct you to a location where you can download your certificate. The email or download location may contain a single SSL certificate or multiple SSL certificates.

The following information must be provided to Extole:

• Private Key (as PKCS#8)
• Public Certificate
• Intermediary Chain

To upload your information, go to the My Extole Tech Center and click on Program Domains. Here you will be able to paste in the files required for your certificate. Tap Save to publish the files.

If your private key is provided in a different format, you may use OpenSSL to convert your private key into PKCS#8. Please refer to the [OpenSSL Documentation].(https://www.openssl.org/docs/apps/pkcs8.html)

It is your responsibility to maintain and renew your certificate. If your certificate in Extole is ever allowed to expire, Extole will automatically generate a new certificate using Let's Encrypt Certificate Authority.

📘

Certificate Signing Request (CSR)

If you would like to use a Certificate Signing Request please email our Support Team at [email protected] and ask us to provide a CSR for your branded domain.

Adding Extole to your SPF Records

A referral program sends two types of emails:

• Referral Emails: Messages sent from the advocate's email address to the friend's email address.
• Program Emails: Welcome email, reward email, stats emails, etc. are sent from your program to the advocate. These will typically be sent from [email protected] using your branded URL.

In the My Extole Tech Center you will see an Email Domains section where you can add your email domain. Here, we display if emails will send from that domain or if there is an SPF/DMARC error to be corrected:

To ensure your emails are delivered, you can add the Extole mail server IP address to your SPF records. You can add spf.extole.io.

Example SPF record update:

mycompany.com.		86400	IN	TXT	"v=spf1 include:spf.extole.io -all"

Adding DKIM Keys

In order to set up DMARC/DKIM, you will need to request DKIM keys from Extole and the following will be provided to you to put into your DNS. Once added, Extole will validate and approve the keys.

Example DNS update:

emXXXX.CompanyName.com          86400 IN CNAME CompanyName.em.extole.io
xtl._domainkey.CompanyName.com  86400 IN CNAME CompanyName.xtl.extole.io
xtl2._domainkey.CompanyName.com 86400 IN CNAME CompanyName.xtl2.extole.io

🚧

Program Sending Domain

If you do not add the records and your SPF or DMARC is set to reject mails from unknown providers, your program emails will be sent from email.referral-mail.com.