Skip to main content

​
Customer Action

**If you choose to use Ledger as an approval device. Each customer’s users with the Approver role are required to have their own dedicated/unused Ledger hardware device for approving requests on Fortary Platform. **

​
Hardware Information

Here is where Ledger’s are available for purchase We recommend the below
  • Ledger Nano S Plus
  • We only recommend this version of Ledger because it is not bluetooth compatible. Providing additional security.
These are also available for purchase at local retail stores such as BestBuy. Fortary recommends customers to acquire their own Ledgers so that customers are always in control of their hardware security tools. But if customers want Fortary’s help to acquire this hardware please reach out to the team.

​
Details

Specific users in the Fortary Platform will be granted Approver role access.  An Approver, will be granted the responsibility to review requested transactions and policy changes in their wallet and workspace. Approvers can reject or approve any of these requests. As an additional layer of hardware security, we require that Approvers utilize an external hardware security device to review the information and attest to their approval.  Currently, we use Ledger devices as this external hardware reviewing device. Some companies use hardware security keys (YubiKeys) as an approval tool. Fortary wants the best security for your system, and Ledger provides the additional security of (1) a passcode and (2) allows for reviewing the data of what you are approving externally. Fortary’s platform is entirely MPC based- it is not a multisignature platform and no key material is stored on a ledger. These ledgers Approvers are simply additional approval tools. They give the Approvers and external hardware to verify any information and provide an additional security layer around the important role of Approvers. Fortary will be replacing this Ledger system in the near future with a mobile application. 

​
Usage Notes

  • Dedicated Device
    • These ledgers should be dedicated to this purpose of approving transactions of Fortary. The wallet on this ledger should have no assets. 
    • Each Approver will have their own unique ledger device.
  • Follow Company Protocols
    • This ledger can be treated like your work related Yubikey. Treat it’s security similar to how these Yubikey security keys are treated
    • This ledger will hold no key material to the wallets on Fortary, and can be used across many wallets on Fortary if needed. 
  • Approver Audit Record
    • These devices are specifically whitelisted in our system and assigned to specific Approvers so that audit records can monitor who approved requests. And Approvers can only use this specific ledger device as an approval tool on their account.
    • An Approver cannot approve any requested transactions or policy changes without a hardware approval device (Ledger). This cannot be bypassed. 
  • Report When Lost or Stolen
    • Please immediately report lost or stolen Ledger devices to the Fortary team. 
    • Because the Ledger doesn’t hold key material to your wallet on Fortary, the wallet’s keys are not compromised. But the Fortary team will act quickly to remove the user’s assigned Ledger device from the Fortary system to secure the user’s account, as well as take other necessary actions.

​
Setting up the Ledger

  1. These ledgers should be new dedicated devices out of the box. Follow the ledger set up instructions provided in its packaging.
  2. If instructed during set up, select “Create new wallet”
  3. Ensure the seed phrase for the Ledger is stored and kept secure
    1. AGAIN, this is NOT the key for your Fortary wallet but should still be stored securely as it secures your hardware approval device (your Ledger).
  4. Upon set up, ensure the below apps are downloaded onto your Ledger device
    1. Bitcoin
    2. Ethereum
    3. Avalanche
  5. Your newly whitelisted ledger device needs to be whitelisted in our system. To do this we ask that you share your Ledger’s xPub information. A Ledger’s xPub is not compromising information. It is a public key for our system to identify your ledger and assign it to your account. This is stored in our MPC TEE hardware for additional security.
    1. When you log into your Fortary workspace, go to the your profile settings in the top right corner
    2. Connect your ledger to your computer
    3. In the top right, select the drop down in your profile card
    4. Select “Get Approver Addresses”
    5. Select “Avalanche/EVM” and “Bitcoin”.
    6. Copy the addresses for each provided by the app.
    7. Share with the Fortary team the address the system provides.
    8. The Fortary team will then assign your hardware device to your account