From 065266157d2335d538dc947b4d4bfe3f619877e9 Mon Sep 17 00:00:00 2001
From: Keefer Taylor | Tessellated <keefer@tessellated.io>
Date: Wed, 5 Jul 2023 22:11:14 -0700
Subject: [PATCH] Add instructions for using TMKMS with Mars

---
 .../validators/key-management/tmkms.mdx       | 39 ++++++++++++++++++-
 1 file changed, 38 insertions(+), 1 deletion(-)

diff --git a/docs/validate/validators/key-management/tmkms.mdx b/docs/validate/validators/key-management/tmkms.mdx
index 07e8cdc..c697967 100644
--- a/docs/validate/validators/key-management/tmkms.mdx
+++ b/docs/validate/validators/key-management/tmkms.mdx
@@ -4,4 +4,41 @@ sidebar_position: 5
 
 # TMKMS
 
-## TBD
\ No newline at end of file
+You can enable remote signing with `TMKMS`, a [key management tool for Tendermint validators](https://github.com/iqlusioninc/tmkms). You can install TMKMS by [following the provided instructions](https://github.com/iqlusioninc/tmkms#installation) from the TMKMS maintainers.
+
+To enable remote signing, edit your `.mars/config/config.toml` to read 
+
+```
+priv_validator_laddr = "tcp://0.0.0.0:26658"
+```
+
+You'll then need to edit `tmkms.toml` to be configured with the Mars network. A sample configuration is provided below.
+```
+# Tendermint KMS configuration file
+## Chain Configuration
+### Mars Network
+
+[[chain]]
+id = "mars-1"
+key_format = { type = "cosmos-json", account_key_prefix = "marspub", consensus_key_prefix = "marsvalconspub" }
+state_file = "/home/user/tmkms/state/mars-1-consensus.json"
+
+## Signing Provider Configuration
+### YubiHSM2 Provider Configuration
+
+[[providers.yubihsm]]
+adapter = { type = "usb" }
+auth = { key = <VALIDATOR AUTH KEY NUMBER>, password_file = "<PASSWORD FILE>" }
+keys = [
+    { key = <MARS CONSENSUS KEY NUMBER>, type = "consensus", chain_ids = ["mars-1"] },
+]
+
+## Validator Configuration
+
+[[validator]]
+chain_id = "mars-1"
+addr = "tcp://<YOUR VALIDATOR IP>:<YOUR VALIDATOR LISTEN ADDRESS (default 26658)>"
+secret_key = "/home/user/tmkms/secrets/kms-identity.key"
+protocol_version = "v0.34"
+reconnect = true
+```