Retrieve the Zigbee NWK key from a device on a network

[ZiggyBeat]

Hi,

In nRF Connect Zigbee SDK, I would like to read the network key from my Zigbee 3.0 device when it has joinded a network (or created one when being a coordinator). Is it possible to do so either with an API cmd or Shell/Cli ?

I've found out that it is actually possible to write a predefined NWK key before starting a network with this command zb_secur_setup_nwk_key() which is not intended to be used in prod., but can't manage to find the equivalent cmd to just read it.

Also, when the product is a TC, is there any way to retrieve programmatically the entries in the TCLK table? (I find only an "add", "set" and "remove" command)

Thank you in advance for your support!

[AHaug]

Hi,

Apologies for the delayed response time.

In general the answer to reading the network key with an API cmd is "no", but you might be able to read the key if you perform a Zigbee sniffer trace that you're able to decrypt (i.e you need to have the encryption key), and fetch the key information from the logs there.

Could you also state which SDK you're working with?

I will have to discuss a bit more with my colleagues to verify my statement and if it is possible to retrieve the entries in the TCLK table, but before I do so I need to know which SDK you're working with

Kind regards,
Andreas

[ZiggyBeat]

Hi Andreas,

Thank you for your answer!

I'm using nRF Connect SDK 2.2.0.

Best regards,

Anthony

[AHaug]

Hi Anthony,

Thank you for getting back. 

Apologies for not following up on the final part of my last reply. My previous answer still stands. There exists no api to read out the key as that would defeat several security aspects. As for retrieving the entries of the TCLK table, I've found nothing other than what you've already mentioned

Kind regards,
Andreas