This page is for operators and CELO holders who need to replace an authorized signer key. As detailed in the Celo account roles description page, Locked CELO accounts can authorize separate signer keys for roles such as voting or validator management. This way, if an authorized signer key is lost or compromised, the Locked CELO account can authorize a new signer to replace the old one, without risking the key that custodies funds. This prevents losing an authorized signer key from becoming a catastrophic event. In fact, it is recommended as an operational best practice to regularly rotate keys to limit the impact of keys being silently compromised.
Rotate a signer key
Authorizing a new signer for a role overwrites the old signer for that role. The new signer must first produce a proof-of-possession, and the key being replaced must never have been used as an authorized signer or Locked CELO Account before.
If VALIDATOR_ACCOUNT_ADDRESS corresponds to a key you possess:
If VALIDATOR_ACCOUNT_ADDRESS is a ReleaseGold contract:
The same flow applies to vote signers with --role vote.
Confirm the rotation:
A newly authorized signer takes effect for validator elections at the next epoch. A deauthorized signer cannot be reauthorized later, so never reuse old signer keys.
