Applicable scenarios
When a team member who holds key shares (of Main Key, Signing Key, or Recovery Key) leaves or transfers, their key shares need to be handed over to other team members. Failure to complete the handover may lead to the following issues:- Transaction signing may fail due to insufficient valid shares, making funds in the Vault temporarily inaccessible.
- The original holder retains Main Key, Signing Key, or Recovery Key permissions, posing security risks.
This scenario covers key share handover between team members. For information on Cobo Guard device replacement or loss, please refer to Reset Cobo Guard after device change or reinstallation.
Prerequisites
- Each key share is bound to the holder’s Cobo Accounts and cannot be directly transferred. Handover requires creating new key shares. New key shares must be generated for the new holder, with corresponding organizational structure adjustments.
- Delete the old holder’s key shares only after confirming the new holder’s key shares are available, to avoid Vault funds being inaccessible during the handover process.
- If you encounter any issues during the handover, please contact the Cobo Support Team promptly.
Procedures
Main Key handover
1
Generate new key share
Original Main Key creates a Signing Key for the new holder. See Create a Signing Key.
2
Verify new key share
(Optional) Confirm the new Signing Key is available with key share verification. See Verify key shares.
3
Upgrade to Main Key
Upgrade the Signing Key to a Main Key. The original Main Key will be automatically deleted after the upgrade. See Convert Signing Key into Main Key.
Signing Key/Recovery Key handover
1
Generate new key share
The Main Key creates a Signing Key or Recovery Key for the new holder. See Create a Signing Key or Create a Recovery Key.
2
Verify new key share
(Optional) Confirm the new key is available with key share verification. See Verify key shares.
3
Delete original key share
After confirming the new key is available, delete the original holder’s Signing Key or Recovery Key. See Delete a Signing Key or Delete a Recovery Key.
Feel free to share your feedback to improve our documentation!