Tendermint KMS is a key management service that allows separating key management from Tendermint nodes. In addition it provides other advantages such as:
It is recommended that the KMS service runs in a separate physical hosts.
Detailed build instructions can be found here.
::: tip When compiling the KMS, ensure you have enabled the applicable features: :::
|Backend||Recommended Command line|
A KMS can be configured in various ways:
Detailed information on how to setup a KMS with YubiHSM2 can be found here
Detailed information on how to setup a KMS with Ledger Tendermint App can be found here