Tendermint Key Management System (KMS) , a.k.a.
tmkms, is a signature service with support for Hardware Security Modules (HSMs), such as YubiHSM2 and Ledger Nano S . It’s intended to be run alongside Cosmos Validators, ideally on separate physical hosts, providing defense-in-depth for online validator signing keys, double signing protection, and functioning as a central signing service that can be used when operating multiple validators in several Cosmos Zones.
We’ve just released a v0.8.0-alpha1 with initial support for Tendermint v0.33, which can be used simultaneously in conjunction with pre-Tendermint v0.33 chains (e.g.
columbus-3) by toggling a configuration option. See the example config file for the notation:
We’re presently running the v0.8.0-alpha1 release in production (albeit with the “legacy” support) and are looking for more people to do initial testing on Tendermint v0.33 chains before we cut a final release.
Please try it out and let us know!