Matter Test-Harness error (600) when pairing with device

[EthanZhao]

Hi there,

I generated the DAC, PAI, and PAA certificates using the chip-tool and merged them into my firmware as factory data. Additionally, I generated the Certificate Declaration using
chip-cert with the following parameters to create CD:

  --key "Chip-Test-CD-Signing-Key.pem" \

  --cert "Chip-Test-CD-Signing-Cert.pem" \

  --out "Chip-Test-CD-1335-8005.der" \

  --format-version "0" \

  --vendor-id 1335 \

  --product-id 8005 \

  --device-type-id 101 \

  --certificate-id "ZIG20141ZB330001-24" \

  --security-level "0" \

  --security-info "0" \

  --version-number "9876" \

  --certification-type “0" \

Then I followed the instructions in docs.nordicsemi.com/.../configuring_cd.html to build the Certificate Declaration (CD) into Zephyr. After that, I attempted to pair the device with the TH but encountered error 600. Could you help me figure out this issue?

Thanks,

[Marte Myrvold]

Hi,

Did you apply the generated CD in chip_project_config.h as explained in Storing Certification Declaration?

Best regards,
Marte

[EthanZhao]

Hi Matre,

Marte Myrvold said:

Did you apply the generated CD in chip_project_config.h as explained in Storing Certification Declaration?

Yes, I did.
Is there possible that may the DAC part does not match with CD?

Regards,
Ethan

[Marte Myrvold]

Hi Ethan,

It seems like you are using different parameter values than the documentation, such as "ZIG20141ZB330001-24" instead of "ZIG20141ZB330003-24" for certificate ID, same with vendor ID and product ID. Please try with the values from the example command in the Generating Certification Declaration for integration testing documentation:

chip-cert gen-cd --key credentials/test/certification-declaration/Chip-Test-CD-Signing-Key.pem --cert credentials/test/certification-declaration/Chip-Test-CD-Signing-Cert.pem --out CD.der --format-version 1 --vendor-id 0xFFF1 --product-id 0x8006 --device-type-id 0xA --certificate-id ZIG20142ZB330003-24 --security-level 0 --security-info 0 --certification-type 1 --version-number 0x2694

If you want to change the vendor ID, the PKI certificates (PAA, PAI, and DAC) must be generated and incorporated into the factory data.

Best regards,
Marte

[EthanZhao]

Hi Marte,
Thanks I'll try it later~

Best Regards,
Ethan