12
votes
Should ledger BIP-44 paths have four elements or five?
The Ledger app itself supports any length from 2 components up to 10, as long as the derivation path starts with 44'/1729'. This allows the Ledger to support either convention, and this support will ...
- 221
11
votes
Accepted
How can I sign a message with my Ledger?
All that ledger knows how to do is to offer signatures of different kinds of messages the client app sends it. So in that sense your question refers more to capability of the Tezos client you are ...
- 6,054
10
votes
Can I use multiple ledgers for baking?
It is possible to have a hot-standby signer albeit I would recommend against it.
In order to have a hot-standby, you initialise a second ledger with the same seed as the first one. Then you need a ...
- 1,009
8
votes
Accepted
Adding a ledger to tezos-client
The difference is in the default derivation path suggested by the cli. If you use /0'/0' in both (or nothing in both) you should get the same keys.
The words are derived based on the hash of the root ...
- 4,599
7
votes
Accepted
Can I connect a Ledger Nano S to a Tezos baking node and have the Nano S sign blocks and endorsements?
There is an app specifically created for baking by Obsidian Systems.
You can install it through Ledger Live (you might still need to enable developer mode in Ledger Live). Instructions here.
You ...
- 168
7
votes
Decent bakery architecture?
Looks like a good start.
Unless your (4G)-router has a battery consider an uninterruptible power source (UPS).
A second laptop with signer and additional ledger on standby in a separate location ...
- 376
7
votes
Accepted
does using a remote-signer or a ledger really improve security?
tezos-signer supports --require-authentication, --magic-bytes, and --check-high-watermark options. You should understand these.
$ tezos-signer man -v 3
...
-A --require-authentication: Require a ...
- 2,506
6
votes
Accepted
security with solo baker setup
The the signer's firewall only allows connections to the signer port from the node VPS who's IP I whitelisted. Because of this, I didn't feel it was necessary to setup signer authentication.
This is ...
- 1,096
5
votes
Accepted
Issues resetting the ledger HWM
The ledger address required for the set ledger high watermark command is what is listed via the command:
$ ./tezos-client list connected ledgers
Found a Tezos Baking 1.5.0 (commit v1.4.3-21-gf3071161)...
- 2,632
5
votes
Would it be possible to find a Derivation path for a public TZ1 address
Assuming your PKH is a tz1* address, we would know 2/3 parts of how this address was derived, the only part missing would be your derivation path.
1 - seed phrase of the ledger device (assumed known ...
- 669
5
votes
How can I sign a message with my Ledger?
There are no very convenient tezos-client commands or RPCs to help with this yet, but one can currently sign a Micheline expression in a conventional way like this:
$ tezos-client hash data '"hello, ...
- 2,506
5
votes
How can one keep account active
Active accounts
For the first question, it depends on what you mean with "active". This term has at least two meanings in the context of Tezos. First, an implicit account (i.e. a Tezos account that ...
- 2,378
4
votes
How to create a wallet in Ledger Nano S?
There are multiple steps to this process, all of which I think you have already done, but I'll walk through them just to highlight how some of it works.
Ledger Setup
In order to use the Ledger you ...
- 1,009
4
votes
HD Derivation Path with P-256 signature
TezBox currenty only supports the ed25519 curve, this is because the underlying library (eztz.js) only supports this curve. We are about to release support for the other two curves in eztz.js in the ...
- 3,351
4
votes
Accepted
Has anyone got ledger working within docker?
SOLVED
Ref. https://gitlab.com/tezos/tezos/issues/475
Apparently the USER env variabled needs to be set for it to work 😝 It is not set by default in official docker images.
I'm reaching out to ...
- 1,973
4
votes
Accepted
When updating the Nano Ledger S firmware, do I need to re-authorize my Ledger S?
You can re-authorize the key using the below:
tezos-client authorize ledger to bake for <SIGNATURE>
Where signature is the name of the ledger, which you can bring up using:
tezos-client list ...
- 3,351
4
votes
Accepted
How to use both linked ledger and fundraiser wallet with tezbox?
Tezbox currently only allows you to view/manage one set of keys at a time. In your case either your fundraiser ICO keys or your ledger keys.
Until they add the ability to view multiple wallets/keys, ...
- 1,999
3
votes
Using Ledger with node to bake
Authorize ledger for baking
This will allow the ledger to sign operation without "human interaction" each time.
$ tezos-client setup ledger to bake for <ALIAS>
Register as delegate
This is ...
- 1,973
3
votes
Using Ledger Nano S to bake/endorse. Guide?
Here you can find the guide from the developers of the Ledger Nano baking app (Obsidian System).
However, I would recommend to download the app from Ledger Live and not compile it yourself, and then ...
- 923
3
votes
Can I connect a Ledger Nano S to a Tezos baking node and have the Nano S sign blocks and endorsements?
You can now download both the Ledger Tezos Baker and Ledger Tezos wallet directly within Ledger Live, bypassing a lot of the CLI work necessary before this existed.
- 59
3
votes
Accepted
How can i setup delegation with an HSM (Ledger, Trezor)?
First of all, when storing tezos using an HSM one still needs to connect to a node in order to perform operations like transactions or delegation. For this there is the choice between connecting to a ...
- 6,054
3
votes
How can I sign a message with my Ledger?
WARNING: The following hack is dangerous because it treats your message as an operation which could be reinterpreted in a later context to mean something you did not intend.
You can actually convince ...
- 286
3
votes
security with solo baker setup
The the signer's firewall only allows connections to the signer port from the node VPS who's IP I whitelisted. Because of this, I didn't feel it was necessary to setup signer authentication.
I would ...
- 1,009
3
votes
Accepted
How can I test the Ledger signer without signing a block or endorsement?
edit: only tried locally, not remote.
I suggest you try signing dummy bytes. This will fail. But the way how it fails will tell you if your ledger is connected in the right way and if your signer ...
- 376
3
votes
Ledger Nano S Public Key Hash Changed
I found the answer to my own question the fix was to correct the import command as follows
tezos-client import secret key <alias> "ledger://<animals>/ed25519" --force
- 81
3
votes
For baking with the ledger, what should I set the high watermark to?
High watermark is the lowest block number that your ledger is allowed to sign bake or endorse operations. That means if the watermark is set to 100000, the ledger is disallowed to sign any block ...
- 2,632
3
votes
Remote signer crashes when asked to sign bytes
0x03 is for generic operations, like transfers. The ledger baking app cannot sign 0x03; it will only sign bytes beginning with 0x01, and 0x02 (blocks, endorsements). You need to exit the baking app ...
- 3,422
2
votes
Can I use multiple ledgers for baking?
The main risk with using multiple ledger/bakers is the risk of double-baking/double-endorsing which will make you lose your bond.
So technically the answer to your question is "yes" however to be ...
- 6,054
2
votes
Nano Ledger and baking
Ledger has indicated that applications for the Ledger Nano S will also work on the Ledger Nano X, although by default they will not take advantage of the device's difference from the Nano S such as ...
- 669
2
votes
Accepted
How can I migrate my Tezos baking address to Ledger Nano?
It is not possible and for a very good reason:
The whole purpose of ledger is to protect the secret key of the addresses it manages in its secure element so that no one can access it.
If you could “...
- 6,054
Only top scored, non community-wiki answers of a minimum length are eligible