# Process cold vault operations in the UI

Use this page for day-to-day cold vault operations in the UI. For the conceptual model, see [Cold vaults](/products/custody/v1.37/identity-and-access/vault-management/cold-vaults).

Because a cold vault is disconnected from the online deployment, accounts and manifests created for a cold vault remain `Pending`, and transaction orders remain `Prepared`, until the cold vault signs them. You export the unsigned operations from Ripple Custody as a `.dat` file, transfer the file to the cold vault server, make it available to the vault through the cold bridge, and then import the signed `.dat` file back into Ripple Custody.

If a newly registered cold vault is still `Pending`, complete the [first-time vault handshake](#complete-the-first-time-vault-handshake) before processing accounts, transactions, or manifests.

## Prerequisites

- A registered cold vault.
- Cold bridge running on the cold vault server.
- Approved transfer media for moving `.dat` files between environments.
- Access to the Ripple Custody UI.


## Cold vault UI actions

| Action | Procedure |
|  --- | --- |
| Complete the first-time handshake | [Complete the first-time vault handshake](#complete-the-first-time-vault-handshake) |
| Create an account with a cold vault | [Create an account with a cold vault](#create-an-account-with-a-cold-vault) |
| Sign a transaction with a cold vault | [Sign a transaction with a cold vault](#sign-a-transaction-with-a-cold-vault) |
| Import signed operations | [Import signed operations](#import-signed-operations) |
| Receive assets | [Receive assets into a cold vault account](#receive-assets-into-a-cold-vault-account) |


## Complete the first-time vault handshake

When you register a cold vault, it can appear with a `Pending` status because it cannot automatically connect to the online deployment. Complete the handshake by importing the initial vault payload from the cold vault server.

1. On the cold vault server, use the cold bridge to download the vault payload as a `.dat` file.
2. Transfer the `.dat` file to the online environment using your approved transfer process.
3. In Ripple Custody, go to **Administration > Vaults**.
4. Select the cold vault.
5. Select the **Pending operations** tab.
6. Select **Import operations**, and then select the `.dat` file.
7. Verify that the vault status changes to `Completed`.
![The vaults list showing the cold vault with a Completed activation status](/assets/cold-vault-status-completed.5a8955d5d6f21da480b5d5e9ba2521e4a9619040c827bf4aa1326acf4a7f3ccb.2bbcbdb9.png)


After the vault status is `Completed`, you can use the vault for account creation, transactions, and manifests.

## Create an account with a cold vault

Creating an account with a cold vault follows the same governed account-creation flow as a hot vault, with an additional cold vault signing step.

1. Go to **Accounts**.
2. Select **Create an account**.
3. Enter the account name and description.
4. Select the cold vault.
5. Select one or more ledgers.
6. In **Advanced settings**, select the account key strategy.
7. Enter any required custom properties.
8. Set the initial lock status.
9. Select **Submit for Approval** and sign the operation.
10. Wait for the required approvals.
11. [Export pending operations](#export-pending-operations).
12. [Sign on the cold vault server](#sign-on-the-cold-vault-server).
13. [Import signed operations](#import-signed-operations).
14. Verify that the account no longer shows a pending or loading state and that the account address is available.


## Sign a transaction with a cold vault

Signing a transaction from a cold vault account uses the same export, sign, and import workflow. Before signing, verify the transaction details on the cold bridge.

1. Create a transfer order or transaction order from the UI.
2. Submit the operation for approval and sign it.
3. Wait until all required approvals are complete.
4. On the account, go to the **Orders** tab and verify that the order reaches the `Prepared` state.
5. [Export pending operations](#export-pending-operations).
6. [Sign on the cold vault server](#sign-on-the-cold-vault-server).
7. [Import signed operations](#import-signed-operations).
8. On the account, go to the **Orders** tab and verify that the order changes to `Broadcasting`.
9. Monitor the transaction in the **Transactions** view.


Verify before signing
Before signing a cold vault transaction, verify the destination address, amount, network, and fees. After a signed transaction broadcasts to the blockchain network, Ripple Custody cannot recall it.

## Export pending operations

1. Go to **Administration > Vaults**.
2. Select the cold vault.
3. Select the **Pending operations** tab.
4. Select **Export operations**.
![The Pending operations tab with the Export operations and Import operations actions](/assets/cold-vault-pending-operations.59dc934c2c254ab6bea487f6c91651cf6709736902fdfa417dfc4f941d470b47.2bbcbdb9.png)


Ripple Custody downloads a `.dat` file containing the pending operations for the cold vault.

Transfer the `.dat` file to the cold vault server using your approved process.

## Sign on the cold vault server

1. On the cold vault server, open the cold bridge UI. The cold bridge shows signing counters for accounts, transactions, manifests, and backups, with the **Upload**, **Download**, **Decode**, and **Refresh** actions.
![The cold bridge UI with signing counters and the Upload, Download, Decode, and Refresh actions](/assets/cold-bridge-ui.b6a8e191e91e0383700a03973b79c18f894d4135a286c6d3e96c2ef1035759ab.2bbcbdb9.png)
2. Select **Upload** and choose the exported `.dat` file.
3. Review the operations that the cold bridge displays.
4. Allow the cold vault to sign the operations through the cold bridge workflow.
5. Wait for the signing counters to show that there are no remaining operations to sign.
6. Select **Download** to save the signed `.dat` file from the cold bridge.


Transfer the signed `.dat` file back to the online environment using your approved process.

## Import signed operations

1. In Ripple Custody, go to **Administration > Vaults**.
2. Select the cold vault.
3. Select the **Pending operations** tab.
4. Select **Import operations**.
5. Select the signed `.dat` file from the cold bridge.
6. Confirm that the operation completes successfully.


After import, Ripple Custody continues processing the account, transaction, or manifest.

## Receive assets into a cold vault account

Receiving assets into a cold vault account does not require cold bridge signing. Incoming funds appear through the standard receive and indexing workflow. If the transfer enters quarantine, follow the standard quarantine release process.

## Related topics

- [Process cold vault operations with the API](/products/custody/v1.37/identity-and-access/vault-management/cold-vault-setup-api)
- [Cold vaults](/products/custody/v1.37/identity-and-access/vault-management/cold-vaults)
- [Create an account in the UI](/products/custody/v1.37/accounts-and-assets/accounts/manage-accounts-ui#create-an-account-in-the-ui)
- [Transaction processing](/products/custody/v1.37/transactions/processing)