I have an On-Premises Exchange 2019 server with Hybrid Deployment with Office365 configured. Everything is working as expected, but DKIM aligned messages are arriving as unauthenticated.
I can confirm that the sender have properly authenticated DKIM, since other public mail providers receive the message correctly with proper DKIM alignment and authentication.
I've made the analysis with the MxToolbox Header Analysis tool, available here.
Basically MxToolbox complains about a failed "DKIM Signature Body Hash Verified". I'm guessing this verification is made server side, on my On-Premises Exchanges, but I'm not sure.
So the whole point here is how to make my On-Premises server properly authenticate the messages it's receiving?