Updated on February 8, 2022
Connect to Mainnet
This documentation has been updated in line with the name changes recommended by the Ethereum Foundation. The execution layer is sometimes known as “Ethereum 1.0.” The consensus layer is sometimes known as “Ethereum 2.0.”
The following instructions provide the steps run validators on the consensus layer Mainnet. You can also use Teku to run a beacon node only.
If staking funds on the network, the funds are locked until transfers are enabled in a future upgrade of the consensus layer.
Use the validator checklist as a guide to secure your validator keys and hardware.
- Install the latest stable version of Teku using a binary distribution, or with Docker.
- If running validators, install any execution client (for example Hyperledger Besu), or access a cloud-based service such as Infura.
Run validators on Mainnet
Consensus layer validators need to access an execution client to onboard new validators. New validators make deposits on the execution layer, and existing consensus layer validators must process the deposits to allow the new validators to join.
Deposits are made into a deposit contract on the execution layer Mainnet. The deposit contract address
The steps to run a consensus layer validator on Mainnet are:
If running your own execution client, sync the execution network containing the deposit contract.
This step is only required if running your own execution client such as Besu. If using a cloud-based service such as Infura, proceed to sync the beacon node.
Sync the execution layer network
This step is only required if running your own execution client.
This example uses Besu as an execution client, but any client can be used. Configure Besu to connect to Mainnet and expose the RPC-HTTP APIs.
besu --rpc-http-enabled=true --rpc-http-port=8545 \ --rpc-http-api=ETH,NET,WEB3 --fast-sync-min-peers=2
Sync the beacon node
Sync the beacon node to ensure the network is synced before registering the validator.
Before network launch there will be no data to sync.
teku --metrics-enabled --rest-api-enabled
Syncing is complete when the head slot reaches the current slot.
Generate the validators and send the deposits
Ensure your Ethereum account has enough ETH to cover the required deposit amount (32 ETH) plus gas.
Use the Ethereum Staking Launchpad to guide you through a step-by-step process to generate your keys and send the deposits.
Remember the passwords that you used to create the validator keys, because you need it to create the validator password files.
Create a password file for each validator key
For each validator key, create a text file containing the password to decrypt the key.
Teku allows you to specify individual keys and passwords in the command line, or you can specify
folders from which to load keys and passwords. If specifying folders, then password files
must have the same name as the keys, but use the
If the Launchpad creates a key named
the password file must be named
The password file format follows
requirements (UTF-8 encoded file, unicode normalization, and control code removal).
Start the validator
If running validators as a split process, then connect the validator to the running beacon node. Otherwise you need to stop the running beacon node and restart it by supplying the validator keys.
Once the validator is activated, view it on the beacon chain explorer at
You can also use Prometheus and Grafana to monitor your nodes.
Run the validator and beacon node as a single process
To run the beacon node and validator client as a single process, stop the running beacon node started previously, and restart it by specifying the validator key files created earlier, and the text files containing the password to decrypt the validator key.
teku --eth1-endpoint=http://localhost:8545 \ --validator-keys=validator/keys/validator_888eef.json:validator/passwords/validator_888eef.txt \ --rest-api-enabled=true --rest-api-docs-enabled=true \ --metrics-enabled
specify the directory to load multiple keys and passwords from.
teku --eth1-endpoint=http://localhost:8545 \ --validator-keys=validator/keys:validator/passwords \ --rest-api-enabled=true --rest-api-docs-enabled=true \ --metrics-enabled
Run the validator on a separate machine
If running the validator client on a separate machine to the beacon node, then run Teku using the
validator-client subcommand, and specify
the location of the beacon node’s API endpoint using
You also need to specify the validator key files created earlier, and the text files containing the password to decrypt the validator key.
teku validator-client --beacon-node-api-endpoint=http://126.96.36.199:5051 \ --validator-keys=validator/keys/validator_888eef.json:validator/passwords/validator_888eef.txt
to specify the directory to load multiple keys and passwords from.
teku validator-client --beacon-node-api-endpoint=http://188.8.131.52:5051 \ --validator-keys=validator/keys:validator/passwords