{"templateId":"markdown","sharedDataIds":{"sidebar":"sidebar-products/wallet/sidebars.yaml"},"props":{"metadata":{"markdoc":{"tagList":["admonition"]},"type":"markdown"},"seo":{"title":"Configure devices and quorums","description":"User guides, API reference, and support resources.","siteUrl":"https://docs.ripple.com/products/custody","lang":"en-US","llmstxt":{"hide":false,"sections":[{"title":"Table of contents","includeFiles":["**/*"],"excludeFiles":[]}],"excludeFiles":[]}},"dynamicMarkdocComponents":[],"compilationErrors":[],"ast":{"$$mdtype":"Tag","name":"article","attributes":{},"children":[{"$$mdtype":"Tag","name":"Heading","attributes":{"level":1,"id":"configure-devices-and-quorums","__idx":0},"children":["Configure devices and quorums"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Wallet-as-a-Service (Palisade) uses Multi-Party Computation (MPC) to protect wallet private keys. Instead of storing a complete key in one place, MPC splits the key into shards distributed across multiple devices. To sign a transaction, a minimum number of those devices must participate."]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Before you can create a wallet, you must:"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Add and pair at least 2 devices."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Create an MPC quorum from those devices."]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"HSM wallets in sandbox"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Sandbox environments also support HSM-based wallets, which don't require devices or quorums. If you want to skip this step and test basic platform features in sandbox first, you can select HSM when you ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/products/wallet/getting-started/create-your-first-wallet"},"children":["create your first wallet"]},". For production, MPC is required."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"understand-device-types","__idx":1},"children":["Understand device types"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Wallet-as-a-Service (Palisade) supports two types of signing device. You can use either type or a mix of both."]},{"$$mdtype":"Tag","name":"div","attributes":{"className":"md-table-wrapper"},"children":[{"$$mdtype":"Tag","name":"table","attributes":{"className":"md"},"children":[{"$$mdtype":"Tag","name":"thead","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"th","attributes":{"data-label":""},"children":[]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"Mobile (Palisade Mobile)"},"children":["Mobile (Palisade Mobile)"]},{"$$mdtype":"Tag","name":"th","attributes":{"data-label":"CloudSign"},"children":["CloudSign"]}]}]},{"$$mdtype":"Tag","name":"tbody","attributes":{},"children":[{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["How it signs"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Manual — you review and approve each transaction on your phone"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Automatic — signs programmatically without manual review"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Best for"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Low-volume wallets that need human oversight per transaction"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["High-volume or API-driven wallets that need fast throughput"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Can approve transactions?"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Yes"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["No (signing only)"]}]},{"$$mdtype":"Tag","name":"tr","attributes":{},"children":[{"$$mdtype":"Tag","name":"td","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Platform"]}]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["iOS (Android coming soon)"]},{"$$mdtype":"Tag","name":"td","attributes":{},"children":["Any cloud instance (AWS, GCP, Azure, on-premises)"]}]}]}]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["See ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/products/wallet/user-interface/devices/types-of-devices"},"children":["Types of devices"]}," for a full comparison."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Recommendation for sandbox"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["For sandbox testing, a CloudSign-only quorum is the fastest path to your first transaction. You can set up mobile devices later when you move to production."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-1-add-devices","__idx":2},"children":["Step 1: Add devices"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Add at least 2 devices to your organization. You can mix mobile and CloudSign devices."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Internal and External devices"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["The Devices page has two tabs: ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Internal"]}," for devices owned by your organization, and ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["External"]}," for devices shared with you by other organizations."]}]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Navigate to the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Devices"]}," section in the Wallet-as-a-Service (Palisade) console."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Add new device"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select the device type (",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Mobile"]}," or ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Cloud"]},")."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["In the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Name this device"]}," field, enter a name that identifies the device (for example, \"CFO Mobile\" or \"CloudSign Node 1\")."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Save and continue"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Repeat until you have at least 2 devices."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-2-pair-each-device","__idx":3},"children":["Step 2: Pair each device"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["New devices start in an ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Unpaired"]}," state. You must pair each device before it can join a quorum."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"pair-a-mobile-device","__idx":4},"children":["Pair a mobile device"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["After you add the mobile device, the console displays a QR code."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Open the Wallet-as-a-Service (Palisade) Mobile app on your phone."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Scan the QR code."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The device status changes to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Waiting for approval"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["An admin approves the device pairing in the console."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The device status changes to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Paired"]},"."]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Sandbox mobile app"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["If you want to test with mobile devices in sandbox, contact the Wallet-as-a-Service (Palisade) team to receive a sandbox version of the app."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"pair-a-cloudsign-device","__idx":5},"children":["Pair a CloudSign device"]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["After you add the CloudSign device, the console displays a ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["pairing key"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Copy the pairing key."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"/products/wallet/user-interface/devices/set-up-and-run-cloudsign"},"children":["Set up and run your CloudSign node"]}," and enter the pairing key when prompted."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The device status changes to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Waiting for approval"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["An admin approves the device pairing in the console."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["The device status changes to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Paired"]},"."]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"Complete all pairings before proceeding"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["You need at least 2 fully paired devices to create a quorum. Make sure all devices show a ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Paired"]}," status before you continue to Step 3."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"step-3-create-an-mpc-quorum","__idx":6},"children":["Step 3: Create an MPC quorum"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["An MPC quorum defines which devices hold key shards and how many must participate to sign a transaction."]},{"$$mdtype":"Tag","name":"ol","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Navigate to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Controls"]}," > ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["MPC Quorums"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Create quorum"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Select the quorum type:",{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Mobile"]}," — all devices are mobile."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Cloud"]}," — all devices are CloudSign."]}]}]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Enter a name and description for the quorum."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["(Optional) Configure a ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Backup and recovery kit"]}," strategy."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Under ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Key shard holders"]},", select at least 2 paired devices."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Set the ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["minimum number of required signatories"]},"."]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"Avoid requiring all devices to sign"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Always set the minimum signatories to at least one fewer than the total number of devices. If you require all devices (for example, 2 of 2), losing or decommissioning a single device means you permanently lose the ability to sign transactions from wallets using that quorum. For example, if your quorum has 3 devices, set the minimum to 2. This gives you fault tolerance — you can still sign even if one device is unavailable, lost, or compromised."]}]},{"$$mdtype":"Tag","name":"ol","attributes":{"start":8},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Create"]},"."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Review the quorum details and click ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Create quorum"]}," to confirm."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["Each device in the quorum receives a notification to approve. All devices must approve within 60 minutes."]},{"$$mdtype":"Tag","name":"li","attributes":{},"children":["After all devices approve, the quorum status changes to ",{"$$mdtype":"Tag","name":"strong","attributes":{},"children":["Confirmed"]},"."]}]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"warning","name":"60-minute approval window"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["If any device rejects the notification or the 60-minute window expires, the quorum is not created and you must start over. Coordinate with all device owners before you create the quorum so they're ready to approve promptly."]}]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"common-quorum-configurations","__idx":7},"children":["Common quorum configurations"]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"cloudsign-only-recommended-for-high-volume-wallets","__idx":8},"children":["CloudSign-only (recommended for high-volume wallets)"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use 3 or more CloudSign devices. Transactions sign automatically within seconds. Pair this configuration with ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/products/wallet/user-interface/security-controls/approvals"},"children":["approval groups"]}," to add human oversight without slowing down signing."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":3,"id":"mobile-only-recommended-for-high-value-wallets","__idx":9},"children":["Mobile-only (recommended for high-value wallets)"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Use 3 or more mobile devices. Every transaction requires manual review and approval on each signer's phone. This provides maximum oversight but limits throughput."]},{"$$mdtype":"Tag","name":"Admonition","attributes":{"type":"info","name":"Signing timeout"},"children":[{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Mobile devices must sign within 5 minutes of receiving a transaction notification. If too few devices respond in time, the transaction fails."]}]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["See ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/products/wallet/user-interface/security-controls/mpc-quorums"},"children":["MPC quorums"]}," for advanced configuration, ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/products/wallet/user-interface/security-controls/key-resharing"},"children":["key resharing"]},", and ",{"$$mdtype":"Tag","name":"a","attributes":{"href":"/products/wallet/user-interface/security-controls/key-restructuring"},"children":["key restructuring"]},"."]},{"$$mdtype":"Tag","name":"Heading","attributes":{"level":2,"id":"next-step","__idx":10},"children":["Next step"]},{"$$mdtype":"Tag","name":"p","attributes":{},"children":["Create a vault to organize your wallets:"]},{"$$mdtype":"Tag","name":"ul","attributes":{},"children":[{"$$mdtype":"Tag","name":"li","attributes":{},"children":[{"$$mdtype":"Tag","name":"a","attributes":{"href":"/products/wallet/getting-started/create-your-first-vault"},"children":["Create your first vault"]}]}]}]},"headings":[{"value":"Configure devices and quorums","id":"configure-devices-and-quorums","depth":1},{"value":"Understand device types","id":"understand-device-types","depth":2},{"value":"Step 1: Add devices","id":"step-1-add-devices","depth":2},{"value":"Step 2: Pair each device","id":"step-2-pair-each-device","depth":2},{"value":"Pair a mobile device","id":"pair-a-mobile-device","depth":3},{"value":"Pair a CloudSign device","id":"pair-a-cloudsign-device","depth":3},{"value":"Step 3: Create an MPC quorum","id":"step-3-create-an-mpc-quorum","depth":2},{"value":"Common quorum configurations","id":"common-quorum-configurations","depth":2},{"value":"CloudSign-only (recommended for high-volume wallets)","id":"cloudsign-only-recommended-for-high-volume-wallets","depth":3},{"value":"Mobile-only (recommended for high-value wallets)","id":"mobile-only-recommended-for-high-value-wallets","depth":3},{"value":"Next step","id":"next-step","depth":2}],"frontmatter":{"title":"Configure devices and quorums","seo":{"title":"Configure devices and quorums"}},"lastModified":"2026-03-19T14:23:44.000Z","pagePropGetterError":{"message":"","name":""}},"slug":"/products/wallet/getting-started/configure-devices-and-quorums","userData":{"isAuthenticated":false,"teams":["anonymous"]},"isPublic":true}