Documentation Index
Fetch the complete documentation index at: https://docs.canton.network/llms.txt
Use this file to discover all available pages before exploring further.
Using an external KMS for managing participant keys
In the following, we describe how to configure a validator so that its participant keys are managed by an external KMS. This guide assumes that you are using the Helm-based deployment of the validator. KMS usage is not currently supported for Docker Compose-based deployments.Migrating an existing validator to use an external KMS
Our recommended approach for switching to use KMS is to:- Set up a fresh validator from scratch with the desired KMS configuration. (Rest of this guide.)
- Transfer all relevant assets from the existing non-KMS validator to the new KMS-enabled validator.
- Retire the non-KMS validator.
Configuring a fresh validator to use an external KMS
Only configuration changes to thesplice-participant Helm chart are required to deploy a KMS-enabled validator.
Also recall that you need to deploy a fresh participant in order for KMS to be used correctly, which implies that you will need to setup the remaining validator components afresh as well (see above).