Title: Configuring DNS Records for Google Workspace
PrimaryCategory: DNS
Type: Procedural
Tags: google_workspace, dns_records, mx_records, spf, dkim, dmarc, verification
Source UI Terms: Bigrock Panel, Google Workspace Admin console, selector, TTL
Source Reference: Configuring DNS Records for Google Workspace

Prerequisites:
- Have access to your Bigrock DNS management panel.
- Access to Google Workspace Admin console.

Steps:
1) Log in to your Bigrock Panel.
2) Verify your domain in the Google Workspace Admin console. Google provides a verification record (TXT or CNAME) to add to your DNS. Add the verification record and confirm the domain verification in the Admin console.
3) Add Google MX records to route email to Google. For example, use records such as smtp.google.com.
4) Publish an SPF TXT record to authorize Google to send mail for your domain. Example:  
   `v=spf1 include:_spf.google.com ~all`  
   Add this as a TXT record for the root domain (host `@`).
5) Enable DKIM signing in Google Workspace:
   - Generate a DKIM key in the Admin console.
   - Add the provided TXT or CNAME record for the selector, e.g., `google._domainkey.yourdomain.com`.
   - After DNS propagation, return to the Admin console and enable DKIM.
6) Add a DMARC record to set policy and reporting (optional but recommended). Example TXT record for `_dmarc.yourdomain.com`:  
   `v=DMARC1; p=quarantine; rua=mailto:postmaster@yourdomain.com`
7) Set reasonable TTL values for all DNS records, such as between 3600 and 86400 seconds, then save your changes.
8) Wait for DNS propagation, which can take from minutes up to 48 hours. Then verify your DNS records by:
   - Using Google Admin console checks.
   - Using public DNS tools such as `dig` or online checkers to confirm MX, SPF, DKIM, and DMARC records are correctly configured.

Warnings:
- Note: DNS changes may take up to 48 hours to fully propagate.
- Note: Incorrect DNS entries can disrupt email delivery and verification.

Summary:
To configure DNS for Google Workspace, log into your Bigrock Panel, add the required verification, MX, SPF, DKIM, and optional DMARC records, set proper TTLs, wait for propagation, and verify all settings to ensure proper email routing and security.

Evaluation Pairs:
Q: How do I verify my domain for Google Workspace in DNS?  
A: Add the TXT or CNAME verification record provided by Google Workspace Admin console to your DNS via Bigrock Panel and confirm verification in the Admin console.

Q: What is the SPF record format to authorize Google to send mail?  
A: Use the TXT record `v=spf1 include:_spf.google.com ~all` added for your root domain (`@`).

Q: How do I enable DKIM signing for Google Workspace?  
A: Generate a DKIM key in Google Admin console, add the provided TXT or CNAME record for the domain selector in DNS, wait for propagation, then enable DKIM in the Admin console.

<ul><li>
Log in to your Bigrock Panel. <img src="https://endurance.my.salesforce.com/file-asset-public/BRLpng?oid=00D36000000qEW6" alt="" title=""></img> / 
</li><li>
Verify your domain in the Google Workspace Admin console — Google gives a verification record (TXT or CNAME) to add to DNS. Add that record and confirm verification in the Admin console. <img src="https://endurance.my.salesforce.com/file-asset-public/BRGTpng?oid=00D36000000qEW6" alt="" title=""></img> 
</li><li>
Add Google MX records to route email to Google. 
<ul><li>
Example :   smtp.google.com <img src="https://endurance.my.salesforce.com/file-asset-public/BRMXpng?oid=00D36000000qEW6" alt="" title=""></img>  <code></code>
</li></ul>
</li><li>
Publish an SPF TXT record to authorize Google to send mail for your domain.
<ul><li>
Example: <code>v=spf1 include:_spf.google.com ~all</code> (add as a TXT record for the root domain <code>@</code>).
</li></ul>
</li><li>
Enable DKIM signing in Google Workspace: generate a DKIM key in the Admin console, then add the provided TXT (or CNAME) record for the selector (e.g., <code>google._domainkey.yourdomain.com</code>). After DNS propagates, return to Admin and turn DKIM on.
</li><li>
Add a DMARC record to set policy and reporting (optional but recommended).
<ul><li>
Example TXT for <code>_dmarc.yourdomain.com</code>: <code>v=DMARC1; p=quarantine; rua=mailto:postmaster@yourdomain.com</code>
</li></ul>
</li><li>
Set reasonable TTLs (e.g., 3600–86400 seconds) and save changes. <img src="https://endurance.my.salesforce.com/file-asset-public/BRTXTpng?oid=00D36000000qEW6" alt="" title=""></img> 
</li><li>
Wait for propagation (DNS changes can take minutes to 48 hours) and then verify: use Google Admin checks and public DNS tools (dig/online checkers) to confirm MX, SPF, DKIM, and DMARC are correct.
</li></ul>

This guide explains how to set up Google Workspace email by adding the required DNS records — MX, SPF, DKIM, and DMARC. After updating the records, allow some time for DNS propagation and then verify the setup in the Google Workspace Admin console.