For managed domains in an inline setting or without ExchangeOnline, the DKIM key has to be used for the ARC seal.
Mail flow:
SEPPmail Secure E-Mail Gateway has to sign with DKIM per Managed Domain.
Settings per Managed Domain:
•Add DKIM signature to outgoing mails from this domain
•Add ARC seal to incoming mails for this domain
•Key Source: Use the DKIM Key