Verify key shares

Currently, key share verification is only supported for Organization-Controlled Wallets. Regular verification of key shares in MPC Wallets is crucial to maintaining their integrity and security. This process helps detect issues like corruption, unauthorized modifications, or loss of key shares.

​

Prerequisite

Cobo Portal supports both automated and manual key share verification. To use this feature, make sure that your TSS Node is updated to version 0.10.0 or later, or your Cobo Guard is updated to version 2.0.3 or later.

​

Set up recurring key share verification

1. Log in to Cobo Portal and click MPC Wallets in the main menu on the left-hand side.
2. Switch to Organization-Controlled Wallets and select the vault containing the key shares you want to verify.
3. Click on the right-hand side.
4. Click Key Share Verification on the right-hand side.
5. Click to locate the key shares you want to verify. You can filter by status, device types, and group types:

• Status: Options include All, Never Verified, Effective, Pending, and Verification Failed. For detailed definitions of each status, refer to the Understand Key Share Verification Status section below.
• Device Types: Options are Cobo Guard (your TSS Node is stored in Cobo Guard) and API (your TSS Node is deployed on a server).
• Group Types: Options include Main Group, Signing Group, and Recovery Group.

6. Click next to the key share you want to verify.
7. In the pop-up window, fill in the following details:

• Key Share Holder: Select the key share holder for whom you want to set up recurring verification.
• Verification Time: Select the start time for the recurring key share verification.
• Frequency: Select how often the recurring key share verification will occur. Options include Daily, Weekly, and Monthly.
• Apply to All Key Shares: If selected, your configuration will apply to all key shares associated with your selected MPC Wallet.

8. Complete a 2FA verification. Once done, your recurring key share verification will be successfully set up.

​

Manage key share verification

1. To view verification details, click next to the key share you want to check.

• Message Details: Displays the message sent to the key share holder’s Cobo Guard for signing or the server where the TSS Node is deployed.
• Signature Data: Shows your signature details, which can also be verified using a third-party tool.

2. To manually verify a key share, click and complete the 2FA verification process. Once done, the manual verification will start automatically.
3. To cancel a failed key share verification, click and complete the 2FA verification process. Once done, the key share status will revert to the most recent state before the failed verification. Note that only failed verifications can be canceled.
4. To resend a verification message to the key share holder’s Cobo Guard or the server where your TSS Node is deployed, click and complete the 2FA verification process. Once done, a verification message will be sent to the selected destination.

​

Understand key share verification status

The table below explains the possible key share verification statuses, their definitions, and the actions you can take for each status.