Whitelist of end devices using IEEE address in the coordinator

[s]

SOC: NRF52840 

SDK : NRF conenct SDK 9.11

Application  Gateway 

we had end devices to join the network which is whitelisted in the coordinator ; so please can you let us know the way to do it ; 

we saw some API in zb_secur.h zb_secur_ke_whitelist_add , zb_secur_ke_whitelist_delete to add and delete IEEE address of the end device 

or we can do leave request method for the devices and avoid rejoining into the network 

[s]

we are using nRF5 SDK for Thread and Zigbee 4.2 SDK and we want to allow the whitelisted devices to join the network from the coordinator 

[tesc]

Hi,

The Zigbee certification (CID) for the nRF5 SDK for Thread and Zigbee is deprecated, which means solutions built on nRF5 SDK for Thread and Zigbee can no longer be certified. For new products you should instead use the nRF Connect SDK, which has Zigbee support. nRF5 SDK for Thread and Zigbee is deprecated and will not be upgraded.

Please see nRF Connect SDK for the current SDK, and our nRF Connect SDK and nRF5 SDK statement for more information about the switch.

Regards,
Terje

[s]

Ok pls can you share the procedure to do in nrf connect sdk

[Marte Myrvold]

Hi,

Can you clarify what you want to achieve? Do you want to allow only specific devices to join the network?

If that is the case, you can use install codes. These are unique pre-shared keys, and you can configure the coordinator so that you only allow devices with matching install codes to join the network. The install code is stored on the joining device, and when you want to add the device to the network, you must add the install code and IEEE address on the coordinator.

The simplest way to test this is to use Zigbee shell, where you will find commands to add the install code on the joining device, enable install code policy on the coordinator, and add the install code and IEEE address of the joining device on the coordinator.
If you want to add the code for this yourself, then use the following functions:

• zb_secur_ic_set() - set install code on the joining device
• zb_set_installcode_policy() - enable install code policy on the coordinator
• zb_secur_ic_str_add() - add install code and IEEE address on the coordinator

Best regards,
Marte