DigiCert® is pleased to announce the release of DigiCert® DNS GA 1.3.0.
This release introduces Valimail monitoring and user impersonation to enhance both security and support operations. Valimail integration brings DMARC activation into the domain setup experience, making email authentication easier to adopt from the start. User impersonation equips authorized Support teams with a secure, fully auditable way to troubleshoot issues within a customer’s context, improving resolution speed while upholding strict security and compliance standards.
We welcome your feedback as we continue to expand and refine the platform.
This release includes the following new features:
Valimail — now a DigiCert® company — can be initiated directly within the primary domain creation workflow. Customers can start Valimail email authentication services as part of creating a new primary domain, embedding DMARC enablement into the domain provisioning process. This integrated initiation simplifies onboarding, reduces deployment friction, and accelerates protection against domain spoofing and phishing attacks — helping customers move more quickly toward full DMARC enforcement.
- Integrated service initiation: Start Valimail email authentication services directly during primary domain creation within the DigiCert® DNS platform.
- Accelerated path to DMARC enforcement: Move more efficiently toward full DMARC monitoring and enforcement through guided setup in Valimail.
- Stronger domain and brand protection: Help mitigate domain spoofing, phishing, and business email compromise (BEC) by establishing authenticated email practices.
- Improved deliverability and trust: Support inbox placement and reinforce brand credibility with properly authenticated email.
Notice
Enabling Valimail during domain creation initiates the service. Customers must still complete account setup and configuration via Valimail to fully activate and enforce DMARC protection.
This feature provides a secure, controlled mechanism that allows authorized DigiCert® Support personnel to temporarily assume the context of a customer user for troubleshooting, diagnostic, and operational support purposes.
The impersonation mechanism is designed to improve support efficiency while maintaining strict security, auditability, and compliance controls. During an impersonation session, system actions execute within the context of the impersonated customer user. However, all activity remains fully attributable to the initiating DigiCert® Support administrator to ensure complete traceability.
- Restricted access: Only authorized DigiCert® Support users can initiate impersonation sessions.
- Authorization control: Access eligibility is managed through a dedicated authorization database table.
- Administrative context: DigiCert® Support users already possess administrative privileges; no additional privilege validation or escalation checks are required.
- Temporary session model: Impersonation is token-based and time-bound to enforce session control.
- Audit and traceability: All impersonation activity is logged and traceable to the initiating DigiCert® Support administrator.
- Security protections: Controls are implemented to prevent unauthorized impersonation and token forgery.
- Authentication integration: The feature integrates seamlessly with existing DigiCert® DNS authentication mechanisms.
Notice
This capability is restricted exclusively to DigiCert® Support personnel. Customer-to-customer impersonation and external impersonation scenarios are not supported.