Skip to content
You are reading GoQuorum development version documentation and some displayed features may not be available in the stable release. You can switch to stable version using the version box at screen bottom.

Store keys in files

You can generate a private and public key pair and store it in files.

The following command generates a key pair in the and new.key files. Provide the passwords at the interactive prompt that displays. Alternatively, leave the password empty to create an unencrypted private key file.

tessera -keygen -filename new

Generate multiple key pairs by providing a comma-separated list of values:

tessera -keygen -filename /path/to/key1,/path/to/key2


The following can be used to automatically generate an unencrypted (unlocked) private key file:

tessera -keygen -filename new < /dev/null

Updating password protected private keys

The password of a private key stored in a file can be updated using the --keys.keyData.privateKeyPath CLI option.

Running any of the following commands allow you to set a new password.

  • Add a password to an unlocked key

    tessera -updatepassword --keys.keyData.privateKeyPath /path/to/.key
  • Change the password of a locked key. This requires providing the current password for the key (either inline or as a file):

    tessera -updatepassword --keys.keyData.privateKeyPath /path/to/.key --keys.passwords <password>
    tessera -updatepassword --keys.keyData.privateKeyPath /path/to/.key --keys.passwordFile /path/to/pwds
  • Use different Argon2 options from the defaults when updating the password

    tessera --keys.keyData.privateKeyPath <path to keyfile> <algorithm> <iterations> <memory> <parallelism>

    All options have been overridden here but only the options you wish to alter from their defaults need to be provided.

ConsenSys has acquired Quorum from J.P. Morgan. Please read the FAQ.
Questions or feedback? You can discuss issues and obtain free support on Tessera Slack channel.
For paid professional support by ConsenSys, contact us at [email protected]