The Operational Credentials cluster (0x003E) is a Matter cluster that Manages the device's operational certificates for secure fabric communication.. It defines 15 commands and 6 attributes and is mandatory for 1 device type.
Operational Credentials 0x003E
Manages the device's operational certificates for secure fabric communication.
Spec History
This cluster's ClusterRevision across the Matter releases it has shipped in. Click a version to inspect the cluster as it existed in that release.
Attributes 6
Commands 15
| Code | Name | Type | Flags |
|---|---|---|---|
| 0x0000 | NOCs | array | read: administer |
| 0x0001 | Fabrics | array | |
| 0x0002 |
SupportedFabrics
5..254
|
int8u | |
| 0x0003 |
CommissionedFabrics
max 254
|
int8u | |
| 0x0004 | TrustedRootCertificates | array | |
| 0x0005 |
CurrentFabricIndex
default 0
|
int8u |
| Code | Name | Direction | Parameters |
|---|---|---|---|
| 0x00 |
AttestationRequest
invoke: administer
This command is used to perform an attestation request.
|
client→server |
AttestationNonce: octet_string |
| 0x01 |
AttestationResponse
This command is used to report the results of the AttestationRequest command.
|
server→client |
AttestationElements: long_octet_string, AttestationSignature: octet_string |
| 0x02 |
CertificateChainRequest
invoke: administer
This command is used to request a certificate from the device attestation certificate chain.
|
client→server |
CertificateType: CertificateChainTypeEnum |
| 0x03 |
CertificateChainResponse
This command is used to report the results of the CertificateChainRequest command.
|
server→client |
Certificate: long_octet_string |
| 0x04 |
CSRRequest
invoke: administer
This command is used to perform a CSR request.
|
client→server |
CSRNonce: octet_string, IsForUpdateNOC: boolean |
| 0x05 |
CSRResponse
This command is used to report the results of the CSRRequest command.
|
server→client |
NOCSRElements: long_octet_string, AttestationSignature: octet_string |
| 0x06 |
AddNOC
invoke: administer
This command is used to add a new NOC to the device.
|
client→server |
NOCValue: long_octet_string, ICACValue: long_octet_string, IPKValue: octet_string, CaseAdminSubject: int64u, AdminVendorId: vendor_id |
| 0x07 |
UpdateNOC
invoke: administer
This command is used to update an existing NOC on the device.
|
client→server |
NOCValue: long_octet_string, ICACValue: long_octet_string |
| 0x08 |
NOCResponse
This command is used to report the results of the AddNOC, UpdateNOC, UpdateFabricLabel and RemoveFabric commands.
|
server→client |
StatusCode: NodeOperationalCertStatusEnum, FabricIndex: fabric_idx, DebugText: char_string |
| 0x09 |
UpdateFabricLabel
invoke: administer
This command is used to set the user-visible fabric label for a given Fabric.
|
client→server |
Label: char_string |
| 0x0A |
RemoveFabric
invoke: administer
This command is used to remove a Fabric from the device.
|
client→server |
FabricIndex: fabric_idx |
| 0x0B |
AddTrustedRootCertificate
invoke: administer
This command is used to add a trusted root certificate to the device.
|
client→server |
RootCACertificate: long_octet_string |
| 0x0C |
SetVIDVerificationStatement
invoke: administer
This command is used to manage the VendorID and VIDVerificationStatement fields of the Fabrics attribute, and the VVSC field of an entry in the NOCs attribute.
|
client→server |
VendorID: vendor_id, VIDVerificationStatement: octet_string, VVSC: long_octet_string |
| 0x0D |
SignVIDVerificationRequest
invoke: administer
This command is used to authenticate the fabric associated with the FabricIndex.
|
client→server |
FabricIndex: fabric_idx, ClientChallenge: octet_string |
| 0x0E |
SignVIDVerificationResponse
This command is used to report the results of the SignVIDVerificationRequest command.
|
server→client |
FabricIndex: fabric_idx, FabricBindingVersion: int8u, Signature: octet_string |
Device Types Using This Cluster
Device types in the Matter spec that reference this cluster
Devices Implementing This Cluster
651 devices in the survey implement this cluster
Govee Strip Light 2 Pro
Shenzhen Qianyan Technology
Decora Smart Wi-Fi Scene Controller Switch
Leviton
Air 4000i
BOSCH
Smart Mini Air Purifier
Shenzhen Qianyan Technology
Aqara Dimmer Switch H2
Aqara
Smart Wall Switch
SONOFF
Matter Over WiFi Dimmer Switch
SONOFF
Griesser Matter Motor Control
Griesser Electronic AG
Griesser BiLine Box | Weinor BiConnect Box
Griesser Electronic AG
Zwischenstecker ArtNr 60 00056
A. Steffen AG
Govee Strip Light 2 Pro
Shenzhen Qianyan Technology
1Home Server
1Home
Remote Switch
Fugetek
Yale Linus L2
Yale
Plug Compact [+M]
BOSCH
ESP32C
Espressif Systems
SwitchBot Air Purifier
SwitchBot
Smart Switch MT1
ThirdReality
Philips A.E27
Signify
Matter Zigbee Bridge
ThirdReality
Cync Full Color ST19
GE Lighting, a Savant company
Govee LED Strip Light
Shenzhen Qianyan Technology
Dreame X50 Ultra Complete
Dreame
Shelly 1 Gen3
Shelly