The Fireblocks Vault is the secure wallet storage solution for safely managing your assets and client funds. Learn more in the Fireblocks Vault article.
In your Fireblocks Key Link workspace, each vault account can be assigned one ECDSA and one EdDSA key. Once a key is assigned to a vault account, it cannot be used in other vault accounts.
The key assignment to a vault account can be done automatically to offer a more seamless experience. If you would like to assign a key manually to a vault account, you can do so by creating a vault account without the automatic key assignment option and following the instructions below.
Automatic key assignment
When you create a vault account in the Fireblocks Console, an automatic key assignment option appears only when there are available keys in your workspace to be assigned.
This function automatically assigns one ECDSA key and one EdDSA key to your vault account from the pool of available keys. You can also create a new vault account with the `POST v1/vault/accounts` API endpoint and the `autoAssign` parameter set to `true`.
If there are no available keys in the workspace (i.e., all the keys are already assigned to other vault accounts), this option will not be available, but you can create a new vault account without any keys assigned. When new keys become available in the workspace, you can assign them manually to the vault account by following the instructions in the Manual Key Assignment section below.
Manual key assignment
To assign an available key to a vault account check the list of available keys in your workspace using the `GET /key_link/signing_keys` API endpoint.
Next, assign a key to a vault account with the `PATCH /key_link/signing_keys/{keyId}` API endpoint, by specifying the vault account to which you want to assign the key.
Creating asset wallets
Once you have created your vault account, you can create asset wallets by following these instructions. Once done, you can start receiving funds and create transactions to be signed by your HSM.
Note
To create a specific asset wallet in the vault account, you must have an assigned key with the algorithm (ECDSA, or EdDSA) required by that asset’s underlying protocol.
If a specific key is missing in the vault account, in the Console’s “Create asset wallet” screen, a warning message will display specifying the missing key, and the assets requiring that key will be disabled.
Learn more about Monitoring your Key Link stats.