# Process cold vault operations in the UI

Use this page for day-to-day cold vault operations in the UI. For the conceptual model, see [Cold vaults](/products/custody/v1.36/identity-and-access/vault-management/cold-vaults).

Due to the disconnected nature of a cold vault, accounts, transactions, or manifests created for a cold vault remain `Pending` until the cold vault signs them. You export pending operations from Ripple Custody, transfer the `.dat` file to the air-gapped workstation, make it available to the vault through the cold bridge, and import the signed result.

If a newly registered cold vault is still `Pending`, complete the [first-time vault handshake](#complete-the-first-time-vault-handshake) before processing accounts, transactions, or manifests.

## Prerequisites

- A registered cold vault.
- Cold bridge running on the air-gapped workstation.
- Approved transfer media for moving `.dat` files between environments.
- Access to the Ripple Custody UI.


## Cold vault UI actions

| Action | Procedure |
|  --- | --- |
| Complete the first-time handshake | [Complete the first-time vault handshake](#complete-the-first-time-vault-handshake) |
| Create an account with a cold vault | [Create an account with a cold vault](#create-an-account-with-a-cold-vault) |
| Sign a transaction with a cold vault | [Sign a transaction with a cold vault](#sign-a-transaction-with-a-cold-vault) |
| Import signed operations | [Import signed operations](#import-signed-operations) |
| Receive assets | [Receive assets into a cold vault account](#receive-assets-into-a-cold-vault-account) |


## Complete the first-time vault handshake

When you register a cold vault, it can appear with a `Pending` status because it cannot automatically connect to the online deployment. Complete the handshake by importing the initial vault payload from the air-gapped workstation.

1. On the air-gapped workstation, use the cold bridge to download the vault payload as a `.dat` file.
2. Transfer the `.dat` file to the online environment using your approved transfer process.
3. In Ripple Custody, go to **Administration > Vaults**.
4. Click the cold vault.
5. Select the **Pending Operations** tab.
6. Click **Import Operations** and select the `.dat` file.
7. Verify that the vault status changes to `Completed`.


After the vault status is `Completed`, you can use the vault for account creation, transactions, and manifests.

## Create an account with a cold vault

Creating an account with a cold vault follows the same governed account-creation flow as a hot vault, with an additional cold vault signing step.

1. Go to **Accounts**.
2. Click **Create an account**.
3. Enter the account name and description.
4. Select the cold vault.
5. Select one or more ledgers.
6. In **Advanced settings**, select the account key strategy.
7. Enter any required custom properties.
8. Set the initial lock status.
9. Click **Submit for Approval** and sign the operation.
10. Wait for the required approvals.
11. [Export pending operations](#export-pending-operations).
12. [Sign on the air-gapped workstation](#sign-on-the-air-gapped-workstation).
13. [Import signed operations](#import-signed-operations).
14. Verify that the account no longer shows a pending or loading state and that the account address is available.


## Sign a transaction with a cold vault

Signing a transaction from a cold vault account uses the same export, sign, and import workflow. Before signing, verify the transaction details on the cold bridge.

1. Create a transfer order or transaction order from the UI.
2. Submit the operation for approval and sign it.
3. Wait until all required approvals are complete.
4. [Export pending operations](#export-pending-operations).
5. [Sign on the air-gapped workstation](#sign-on-the-air-gapped-workstation).
6. [Import signed operations](#import-signed-operations).
7. Monitor the transaction in the **Transactions** view.


Verify before signing
Before signing a cold vault transaction, verify the destination address, amount, network, and fees. Once a signed transaction is broadcast to the blockchain network, it cannot be recalled by Ripple Custody.

## Export pending operations

1. Go to **Administration > Vaults**.
2. Click the cold vault.
3. Select the **Pending Operations** tab.
4. Click **Export Operations**.


Ripple Custody downloads a `.dat` file containing the pending operations for the cold vault.

Transfer the `.dat` file to the air-gapped workstation using your approved process.

## Sign on the air-gapped workstation

1. On the air-gapped workstation, open the cold bridge UI.
2. Select the exported `.dat` file.
3. Review the operations displayed by the cold bridge.
4. Allow the cold vault to sign the operations through the cold bridge workflow.
5. Wait for the signing counters to show that there are no remaining operations to sign.
6. Download the signed `.dat` file from the cold bridge.


Transfer the signed `.dat` file back to the online environment using your approved process.

## Import signed operations

1. In Ripple Custody, go to **Administration > Vaults**.
2. Click the cold vault.
3. Select the **Pending Operations** tab.
4. Click **Import Operations**.
5. Select the signed `.dat` file from the cold bridge.
6. Confirm that the operation completes successfully.


After import, Ripple Custody continues processing the account, transaction, or manifest.

## Receive assets into a cold vault account

Receiving assets into a cold vault account does not require cold bridge signing. Incoming funds appear through the standard receive and indexing workflow. If the incoming transfer is quarantined, follow the standard quarantine release process.

## Related topics

- [Process cold vault operations with the API](/products/custody/v1.36/identity-and-access/vault-management/cold-vault-setup-api)
- [Cold vaults](/products/custody/v1.36/identity-and-access/vault-management/cold-vaults)
- [Create an account in the UI](/products/custody/v1.36/accounts-and-assets/accounts/manage-accounts-ui#create-an-account-in-the-ui)
- [Transaction processing](/products/custody/v1.36/transactions/processing)