<p>I use an older Intel NUC that has no network capabilities. If you use a device with WiFi or Bluetooth capabilities, I strongly suggest that you disable the WiFi card and Bluetooth in the system BIOS before installing your OS.</p>

CC BY-SA 4.0
2022-09-07T20:31:44.077Z
2022-09-07T20:31:44.077Z
FungiPool
<p>Either of those options are fine.  You want your cold environment to stay cold.  The hardware requirements are minimal for generating keys and signing transactions.  Of the machines you listed above, I'd go with whichever machine you are most likely to keep offline and cold.  Disabling WiFi and Bluetooth in the system BIOS, as well as a fresh OS install before key generation would be best.  Also, remember to follow offline workflows for system, node, and software updates.</p>
<p>I use an old laptop and keep it tucked away until I need it.</p>

CC BY-SA 4.0
2022-09-07T22:13:56.903Z
bonus points for physically removing the wifi card from your hardware
zhekson
CC BY-SA 4.0
2022-09-07T21:52:11.843Z
2022-09-07T21:54:52.827Z
2022-09-07T21:54:52.827Z
Chabs
<p>Another solution is to use a bootable USB with <a href="https://tails.boum.org/" rel="nofollow noreferrer">TailsOS</a> installed in it.
This operating system is created to block surveillance and enanche privacy and it permits to you to block any connection at boot and have a persisten encrypted storage.</p>
<p>If you are interested, I created a guide on how to implement <a href="https://github.com/Techs2Help/TailsOS_cold_storage" rel="nofollow noreferrer">this solution</a>.</p>
<p>I can give you support in case of need.</p>

CC BY-SA 4.0
2022-09-08T04:13:44.380Z
2022-10-12T14:05:38.330Z
2022-10-12T14:05:38.330Z
Nic_T2H
<p>What are the best recommended hardware devices to use that are offline / cold to generate the stake pool cold-keys and key rotation?</p>
<ul>
<li>Laptop with WIFI switched off?</li>
<li>Raspberry pi zero with wifi disabled? not connected to power when offline?</li>
</ul>

CC BY-SA 4.0
2022-09-08T09:35:33.957Z
Why not use your Ledger hardware wallet for the stake pool cold key?
It is not possible to import your existing keys to it, you can use it only if you start a new stake pool and create a new cold key.
George - APEX Stake Pool
CC BY-SA 4.0
2022-09-10T15:40:24.740Z
I didn’t even think of using a ledger, that’s an interesting idea. Do you use that?
TheStophe
CC BY-SA 4.0
2022-09-11T05:55:24.483Z
No, because I started my stake pool before that feature became available, and importing existing cold keys is not possible. But I would probably do it now, if I started a new stake pool.
George - APEX Stake Pool
CC BY-SA 4.0
2022-09-12T22:01:27.770Z
Thank you George. Would you happen to have a tutorial about how to do this? Or link? Thx!
TheStophe
CC BY-SA 4.0
2022-09-13T04:45:00.437Z
You can find instructions here: https://github.com/vacuumlabs/cardano-hw-cli/blob/develop/docs/pool-registration.md
George - APEX Stake Pool
<stake-pool>
What's the best hardware device to generate stake pool cold-keys and key rotation?
# What's the best hardware device to generate stake pool cold-keys and key rotation?

(Asked by: username_0 on 2022-08-25)

What are the best recommended hardware devices to use that are offline / cold to generate the stake pool cold-keys and key rotation?

* Laptop with WIFI switched off?
* Raspberry pi zero with wifi disabled? not connected to power when offline?

**Tags:** stake-pool
> **Comments:**
> **username_1**: Why not use your Ledger hardware wallet for the stake pool cold key? It is not possible to import your existing keys to it, you can use it only if you start a new stake pool and create a new cold key.  
> **username_0**: I didn’t even think of using a ledger, that’s an interesting idea. Do you use that?  
> **username_1**: No, because I started my stake pool before that feature became available, and importing existing cold keys is not possible. But I would probably do it now, if I started a new stake pool.  
> **username_0**: Thank you George. Would you happen to have a tutorial about how to do this? Or link? Thx!  
> **username_1**: You can find instructions here: https://github.com/vacuumlabs/cardano-hw-cli/blob/develop/docs/pool-registration.md  

---

## 3 answers

### Answer by username_2 on 2022-09-07. Score: 0

I use an older Intel NUC that has no network capabilities. If you use a device with WiFi or Bluetooth capabilities, I strongly suggest that you disable the WiFi card and Bluetooth in the system BIOS before installing your OS.


---

### Answer by username_3 on 2022-09-07. Score: 0

Either of those options are fine. You want your cold environment to stay cold. The hardware requirements are minimal for generating keys and signing transactions. Of the machines you listed above, I'd go with whichever machine you are most likely to keep offline and cold. Disabling WiFi and Bluetooth in the system BIOS, as well as a fresh OS install before key generation would be best. Also, remember to follow offline workflows for system, node, and software updates.

I use an old laptop and keep it tucked away until I need it.

> **Comments:**
> **username_4**: bonus points for physically removing the wifi card from your hardware  

---

### Answer by username_5 on 2022-09-08. Score: 0

Another solution is to use a bootable USB with [TailsOS](https://tails.boum.org/) installed in it.
This operating system is created to block surveillance and enanche privacy and it permits to you to block any connection at boot and have a persisten encrypted storage.

If you are interested, I created a guide on how to implement [this solution](https://github.com/Techs2Help/TailsOS_cold_storage).

I can give you support in case of need.


---

