Retrieve the Zigbee NWK key from a device on a network

Question

Hi, 
 In nRF Connect Zigbee SDK, I would like to read the network key from my Zigbee 3.0 device when it has joinded a network (or created one when being a coordinator). Is it possible to do so either with an API cmd or Shell/Cli ? 
 I've found out that it is actually possible to write a predefined NWK key before starting a network with this command zb_secur_setup_nwk_key() which is not intended to be used in prod., but can't manage to find the equivalent cmd to just read it. 
 Also, when the product is a TC, is there any way to retrieve programmatically the entries in the TCLK table? (I find only an "add", "set" and "remove" command) 
 Thank you in advance for your support!

AHaug · Accepted Answer

Hi, Apologies for the delayed response time. 
 In general the answer to reading the network key with an API cmd is "no", but you might be able to read the key if you perform a Zigbee sniffer trace that you're able to decrypt (i.e you need to have the encryption key), and fetch the key information from the logs there. 
 Could you also state which SDK you're working with? 
 I will have to discuss a bit more with my colleagues to verify my statement and if it is possible to retrieve the entries in the TCLK table, but before I do so I need to know which SDK you're working with 
 Kind regards, Andreas

Retrieve the Zigbee NWK key from a device on a network

Top Replies