Hot answers tagged

12 votes

Should ledger BIP-44 paths have four elements or five?

The Ledger app itself supports any length from 2 components up to 10, as long as the derivation path starts with 44'/1729'. This allows the Ledger to support either convention, and this support will ...
user avatar
11 votes
Accepted

How can I sign a message with my Ledger?

All that ledger knows how to do is to offer signatures of different kinds of messages the client app sends it. So in that sense your question refers more to capability of the Tezos client you are ...
user avatar
  • 6,006
10 votes

Can I use multiple ledgers for baking?

It is possible to have a hot-standby signer albeit I would recommend against it. In order to have a hot-standby, you initialise a second ledger with the same seed as the first one. Then you need a ...
user avatar
  • 999
8 votes
Accepted

Adding a ledger to tezos-client

The difference is in the default derivation path suggested by the cli. If you use /0'/0' in both (or nothing in both) you should get the same keys. The words are derived based on the hash of the root ...
user avatar
  • 4,409
7 votes
Accepted

Can I connect a Ledger Nano S to a Tezos baking node and have the Nano S sign blocks and endorsements?

There is an app specifically created for baking by Obsidian Systems. You can install it through Ledger Live (you might still need to enable developer mode in Ledger Live). Instructions here. You ...
user avatar
7 votes

Decent bakery architecture?

Looks like a good start. Unless your (4G)-router has a battery consider an uninterruptible power source (UPS). A second laptop with signer and additional ledger on standby in a separate location ...
user avatar
7 votes
Accepted

does using a remote-signer or a ledger really improve security?

tezos-signer supports --require-authentication, --magic-bytes, and --check-high-watermark options. You should understand these. $ tezos-signer man -v 3 ... -A --require-authentication: Require a ...
user avatar
  • 2,501
6 votes
Accepted

security with solo baker setup

The the signer's firewall only allows connections to the signer port from the node VPS who's IP I whitelisted. Because of this, I didn't feel it was necessary to setup signer authentication. This is ...
user avatar
5 votes

How can I sign a message with my Ledger?

There are no very convenient tezos-client commands or RPCs to help with this yet, but one can currently sign a Micheline expression in a conventional way like this: $ tezos-client hash data '"hello, ...
user avatar
  • 2,501
5 votes
Accepted

Issues resetting the ledger HWM

The ledger address required for the set ledger high watermark command is what is listed via the command: $ ./tezos-client list connected ledgers Found a Tezos Baking 1.5.0 (commit v1.4.3-21-gf3071161)...
user avatar
  • 2,602
5 votes

Would it be possible to find a Derivation path for a public TZ1 address

Assuming your PKH is a tz1* address, we would know 2/3 parts of how this address was derived, the only part missing would be your derivation path. 1 - seed phrase of the ledger device (assumed known ...
user avatar
5 votes

How can one keep account active

Active accounts For the first question, it depends on what you mean with "active". This term has at least two meanings in the context of Tezos. First, an implicit account (i.e. a Tezos account that ...
user avatar
  • 2,348
4 votes

How to create a wallet in Ledger Nano S?

There are multiple steps to this process, all of which I think you have already done, but I'll walk through them just to highlight how some of it works. Ledger Setup In order to use the Ledger you ...
user avatar
  • 999
4 votes

HD Derivation Path with P-256 signature

TezBox currenty only supports the ed25519 curve, this is because the underlying library (eztz.js) only supports this curve. We are about to release support for the other two curves in eztz.js in the ...
user avatar
4 votes
Accepted

Has anyone got ledger working within docker?

SOLVED Ref. https://gitlab.com/tezos/tezos/issues/475 Apparently the USER env variabled needs to be set for it to work 😝 It is not set by default in official docker images. I'm reaching out to ...
user avatar
  • 1,973
4 votes
Accepted

When updating the Nano Ledger S firmware, do I need to re-authorize my Ledger S?

You can re-authorize the key using the below: tezos-client authorize ledger to bake for <SIGNATURE> Where signature is the name of the ledger, which you can bring up using: tezos-client list ...
user avatar
4 votes
Accepted

How to use both linked ledger and fundraiser wallet with tezbox?

Tezbox currently only allows you to view/manage one set of keys at a time. In your case either your fundraiser ICO keys or your ledger keys. Until they add the ability to view multiple wallets/keys, ...
user avatar
  • 1,979
3 votes

Using Ledger with node to bake

Authorize ledger for baking This will allow the ledger to sign operation without "human interaction" each time. $ tezos-client setup ledger to bake for <ALIAS> Register as delegate This is ...
user avatar
  • 1,973
3 votes

Using Ledger Nano S to bake/endorse. Guide?

Here you can find the guide from the developers of the Ledger Nano baking app (Obsidian System). However, I would recommend to download the app from Ledger Live and not compile it yourself, and then ...
user avatar
  • 893
3 votes
Accepted

How can i setup delegation with an HSM (Ledger, Trezor)?

First of all, when storing tezos using an HSM one still needs to connect to a node in order to perform operations like transactions or delegation. For this there is the choice between connecting to a ...
user avatar
  • 6,006
3 votes

Can I connect a Ledger Nano S to a Tezos baking node and have the Nano S sign blocks and endorsements?

You can now download both the Ledger Tezos Baker and Ledger Tezos wallet directly within Ledger Live, bypassing a lot of the CLI work necessary before this existed.
user avatar
3 votes

How can I sign a message with my Ledger?

WARNING: The following hack is dangerous because it treats your message as an operation which could be reinterpreted in a later context to mean something you did not intend. You can actually convince ...
user avatar
3 votes

security with solo baker setup

The the signer's firewall only allows connections to the signer port from the node VPS who's IP I whitelisted. Because of this, I didn't feel it was necessary to setup signer authentication. I would ...
user avatar
  • 999
3 votes
Accepted

How can I test the Ledger signer without signing a block or endorsement?

edit: only tried locally, not remote. I suggest you try signing dummy bytes. This will fail. But the way how it fails will tell you if your ledger is connected in the right way and if your signer ...
user avatar
3 votes

Ledger Nano S Public Key Hash Changed

I found the answer to my own question the fix was to correct the import command as follows tezos-client import secret key <alias> "ledger://<animals>/ed25519" --force
user avatar
  • 81
3 votes

For baking with the ledger, what should I set the high watermark to?

High watermark is the lowest block number that your ledger is allowed to sign bake or endorse operations. That means if the watermark is set to 100000, the ledger is disallowed to sign any block ...
user avatar
  • 2,602
3 votes

Remote signer crashes when asked to sign bytes

0x03 is for generic operations, like transfers. The ledger baking app cannot sign 0x03; it will only sign bytes beginning with 0x01, and 0x02 (blocks, endorsements). You need to exit the baking app ...
user avatar
  • 3,364
2 votes

Can I use multiple ledgers for baking?

The main risk with using multiple ledger/bakers is the risk of double-baking/double-endorsing which will make you lose your bond. So technically the answer to your question is "yes" however to be ...
user avatar
  • 6,006
2 votes

Nano Ledger and baking

Ledger has indicated that applications for the Ledger Nano S will also work on the Ledger Nano X, although by default they will not take advantage of the device's difference from the Nano S such as ...
user avatar
2 votes
Accepted

How can I migrate my Tezos baking address to Ledger Nano?

It is not possible and for a very good reason: The whole purpose of ledger is to protect the secret key of the addresses it manages in its secure element so that no one can access it. If you could “...
user avatar
  • 6,006

Only top scored, non community-wiki answers of a minimum length are eligible