Changing TC Link Key with XBee Coordinator and nRF52840 Router in Centralized Zigbee Network

RE: Changing TC Link Key with XBee Coordinator and nRF52840 Router in Centralized Zigbee Network

Edvin — Wed, 05 Feb 2025 12:27:05 GMT

Hello Julen,

I understand. It would require the device to be connected via serial to something that will send it the link key though, right? It is a bit unusual, and not the way I would think that standard zigbee devices would work.

I don't know if you are in control of the FW on all the devices in the network, but I would think Install Codes are made for this purpose. When all devices are using the same link key, it means that most zigbee devices will work in all zigbee networks out there, but you can use install codes to decide what devices that are allowed to join, and to make sure that another network doesn't hijack your device.

Most likely, this feature request will not be added in the current R22 Zboss library, but I can add it so that it can be considered for the R23 Zboss library. This will probably only be supported by the nRF54L series, though.

Best regards,

Edvin

RE: Changing TC Link Key with XBee Coordinator and nRF52840 Router in Centralized Zigbee Network

jemalkorra — Wed, 05 Feb 2025 07:51:07 GMT

Hi Edvin,

No problem, and thanks for getting back to me.

What I want is to have a centralized Trust Center, which in our case will be the XBee coordinator. The idea is to generate the link key dynamically based on some internal information combined with random data. This link key would then be configured through UART, ensuring that all devices share the same PAN ID and link key, with the coordinator acting as the centralized Trust Center.

However, since the link key cannot be changed without distributing the Trust Center, we had to modify the process. I'm not sure if this approach fully aligns with the Zigbee standard, or if there are best practices we might be overlooking. Let me know your thoughts.

Best regards,

Julen

RE: Changing TC Link Key with XBee Coordinator and nRF52840 Router in Centralized Zigbee Network

Edvin — Mon, 03 Feb 2025 07:47:05 GMT

Hello Julen,

Sorry for the late reply!

I'm glad to hear that you found a solution.

I will forward your thoughts to our Zigbee team, but I would like to hear your thoughts on the topic first.

What do you imagine being the application flow? Do you want the key to be decided runtime? Or compile time? Do you know any other devices supporting this, and how do they do it?

Best regards,

Edvin

RE: Changing TC Link Key with XBee Coordinator and nRF52840 Router in Centralized Zigbee Network

jemalkorra — Thu, 30 Jan 2025 08:45:04 GMT

Hi everyone,

I’ve solved the issue! Now, I’ve configured the Zigbee network to use a Distributed Trust Center (TC), which allows me to use different link keys.

As a thought, in a Centralized TC setup, it might be beneficial if Nordic could modify link keys dynamically instead of relying on the hardcoded Zigbee Alliance Key.

Just an idea—curious to hear your thoughts!

Thanks,
Julen