The Group Key Management cluster (0x003F) is a Matter cluster that Manages cryptographic keys used for secure group communication.. It defines 6 commands and 5 attributes and is mandatory for 1 device type.

Last updated 15 Sep 2026

Group Key Management 0x003F

Global Cluster

Utility

Introduced in: Matter 1.0

Devices: 711

Manages cryptographic keys used for secure group communication.

Spec History

This cluster's ClusterRevision across the Matter releases it has shipped in. Click a version to inspect the cluster as it existed in that release.

Matter 1.0 Matter 1.1 Matter 1.2 Matter 1.3 Matter 1.4 Matter 1.5 rev 2 Matter master rev 4

Attributes 5

Commands 6

Features 2

Code	Name	Type	Flags
0x0000	GroupKeyMap	array	Writable write: manage
0x0001	GroupTable	array
0x0002	MaxGroupsPerFabric default 0	int16u
0x0003	MaxGroupKeysPerFabric min 1 · default 1	int16u
0x0004	GroupcastAdoption	array	Writable Optional Provisional read: administer write: administer

Code	Name	Direction	Parameters
0x00	KeySetWrite invoke: administer This command is used by Administrators to set the state of a given Group Key Set, including atomically updating the state of all epoch keys.	client→server	`GroupKeySet`: GroupKeySetStruct
0x01	KeySetRead invoke: administer This command is used by Administrators to read the state of a given Group Key Set.	client→server	`GroupKeySetID`: int16u
0x02	KeySetReadResponse This command SHALL be generated in response to the KeySetRead command, if a valid Group Key Set was found.	server→client	`GroupKeySet`: GroupKeySetStruct
0x03	KeySetRemove invoke: administer This command is used by Administrators to remove all state of a given Group Key Set.	client→server	`GroupKeySetID`: int16u
0x04	KeySetReadAllIndices invoke: administer This command is used by Administrators to query a list of all Group Key Sets associated with the accessing fabric.	client→server	None
0x05	KeySetReadAllIndicesResponse This command SHALL be generated in response to KeySetReadAllIndices and it SHALL contain the list of _GroupKeySetID_ for all Group Key Sets associated with the scoped Fabric.	server→client	`GroupKeySetIDs`: int16u