Using Classic Outlook on Windows for personal email, calendar, and contact management
respectfully Brad,
When you write a novel no one reads it. We need to be concise as engineers. Not convoluted or bloviated. This thread is about email failing to yahoo and aol. Neither yahoo nor gmail require DKIM unless you are using your account inside of a third party mailer, and this was off topic for discussion here.
What is required, according to their public documentation is DMARC and SPF. Most everyone has SPF. I gave the DMARC in a single sentence. One sentence will cover everything you need and you can test it to verify and we can move on.
If you want to make a tutorial for something then start a new thread and offer guidance. You're adding a lot of things that no one needs or asked for to troubleshoot delivery problems to yahoo and aol. The onmicrososft.com DKIM matches any DKIM under the tenant. These are not separate keys. You only have one DKIM per exchange deployment. If you rotate the keys for one then you rotate for the other domains also. You can test this with dns. I do not recommend people fumble through things until they start working with a bunch of extra settings or switches they don't understand.
Understand the technology and deploy in the right manner or seek support that can assist you so you don't create more problems than you were asked to fix. Keep it basic. If more is needed they can ask. DKIM is not required for delivery to AOL or YAHOO and you wrote more than ten paragraphs with misleading DKIM information. Next time you setup a client, just make spf and dmarc as I posted and test it. If you configure those two records correctly it will pass every time. If you still have failures then you did not make those two records right. Yahoo only rejects mail for dkim if someone tried to set up DKIM but it's not configured properly. If it's not enabled on your domain then you can't fail sending to yahoo.