General and node management60 — Administrator Commissioning

Matter Cluster 60 — Administrator Commissioning

Matter Cluster 60 (0x003C) Administrator Commissioning: attributes, commands, events, data types, shadow paths and bridge payload examples.

Matter Cluster 60 — Administrator Commissioning Cluster

Matter Cluster 60, also written as 0x003C, is the Administrator Commissioning Cluster. This cluster is used to trigger a Node to allow a new Administrator to commission it. It defines Attributes, Commands and Responses needed for this purpose. For the management of Operational Credentials and Trusted Root Certificates, the Operational Credentials cluster is used.

Cluster Identity

FieldValue
Cluster ID decimal60
Cluster ID hex0x003C
Cluster nameAdministrator Commissioning
Cluster revision (Matter 1.6.1)1
Roleutility
ScopeNode
PICS codeCADMIN
Typical endpoint0

Revision history

RevisionChange
1Initial revision

Shadow Path Format

Cluster 60 values in the device shadow use this format:

endpoint_id / 60 / attribute_id

Example:

{
  "0/60/0": 0
}
PartMeaning
0Endpoint ID
60Administrator Commissioning cluster
0WindowStatus attribute

Cluster 60 Features

The FeatureMap attribute (0/60/65532) is a bitmap. Each bit set means the device implements that feature and the attributes and commands that depend on it.

BitCodeFeatureConformanceMeaning
0BCBasicONode supports Basic Commissioning Method

Example: FeatureMap = 0 means no optional feature is enabled; 1 means every feature listed above is enabled.


Data Types

CommissioningWindowStatusEnum

ValueNameConformanceMeaning
0WindowNotOpenMCommissioning window not open
1EnhancedWindowOpenMAn Enhanced Commissioning Method window is open
2BasicWindowOpenBCA Basic Commissioning Method window is open

StatusCodeEnum

ValueNameConformanceMeaning
2BusyMCould not be completed because another commissioning is in progress
3PAKEParameterErrorMProvided PAKE parameters were incorrectly formatted or otherwise invalid
4WindowNotOpenMNo commissioning window was currently open

Cluster 60 Attributes

Cluster 60 defines 3 attributes plus the global attributes. Conformance: M mandatory, O optional, a feature code means "mandatory when that feature is present", square brackets mean "optional when …".

IDHexAttributeTypeConformanceAccessQualitiesDefault
00x0000WindowStatusCommissioningWindowStatusEnumMR (read: view)——
10x0001AdminFabricIndexfabric-idxMR (read: view)nullable—
20x0002AdminVendorIdvendor-idMR (read: view)nullable—

Global attributes

IDHexAttributeMeaning
655280xFFF8GeneratedCommandListResponse command IDs this server generates.
655290xFFF9AcceptedCommandListCommand IDs this server accepts.
655310xFFFBAttributeListAttribute IDs implemented.
655320xFFFCFeatureMapImplemented optional features (see above).
655330xFFFDClusterRevisionCluster revision implemented; 1 for a Matter 1.6.1 device.

Attribute Details

Attribute 0 / 0x0000 — WindowStatus

Path example:

0/60/0

Indicates whether a new Commissioning window has been opened by an Administrator, using either the OpenCommissioningWindow command or the OpenBasicCommissioningWindow command. This attribute must revert to WindowNotOpen upon expiry of a commissioning window. An initial commissioning window is not opened using either the OpenCommissioningWindow command or the OpenBasicCommissioningWindow command, and therefore this attribute is set to WindowNotOpen on initial commissioning.

PropertyValue
TypeCommissioningWindowStatusEnum
ConformanceM
AccessR (read: view)

Values (CommissioningWindowStatusEnum):

ValueNameMeaning
0WindowNotOpenCommissioning window not open
1EnhancedWindowOpenAn Enhanced Commissioning Method window is open
2BasicWindowOpenA Basic Commissioning Method window is open

Example:

{
  "0/60/0": 0
}

Attribute 1 / 0x0001 — AdminFabricIndex

Path example:

0/60/1

When the WindowStatus attribute is not set to WindowNotOpen, this attribute indicates the FabricIndex associated with the Fabric scoping of the Administrator that opened the window. This may be used to cross-reference in the Fabrics attribute of the Operational Credentials cluster. If, during an open commissioning window, the fabric for the Administrator that opened the window is removed, then this attribute is set to null. When the WindowStatus attribute is set to WindowNotOpen, this attribute is set to null.

PropertyValue
Typefabric-idx
ConformanceM
AccessR (read: view)
Qualitiesnullable

Example:

{
  "0/60/1": 1
}

Attribute 2 / 0x0002 — AdminVendorId

Path example:

0/60/2

When the WindowStatus attribute is not set to WindowNotOpen, this attribute indicates the Vendor ID associated with the Fabric scoping of the Administrator that opened the window. This field must match the VendorID field of the Fabrics attribute list entry associated with the Administrator having opened the window, at the time of window opening. If the fabric for the Administrator that opened the window is removed from the node while the commissioning window is still open, this attribute must NOT be updated. When the WindowStatus attribute is set to WindowNotOpen, this attribute is set to null.

PropertyValue
Typevendor-id
ConformanceM
AccessR (read: view)
Qualitiesnullable

Example:

{
  "0/60/2": 1
}

Cluster 60 Commands

Cluster 60 has 3 client-to-server commands and 0 responses.

IDHexCommandDirectionConformanceResponseDescription
00x00OpenCommissioningWindowclient → serverMstatusThis command is used by a current Administrator to instruct a Node to go into commissioning mode.
10x01OpenBasicCommissioningWindowclient → serverBCstatusThis command may be used by a current Administrator to instruct a Node to go into commissioning mode, if the node supports the Basic Commissioning Method.
20x02RevokeCommissioningclient → serverMstatusThis is an idempotent command.

AcceptedCommandList

The AcceptedCommandList attribute lists the command IDs the endpoint actually implements:

endpoint_id / 60 / 65529
{
  "0/60/65529": [
    0,
    1,
    2
  ]
}

Before sending a Cluster 60 command, check that the command ID exists in endpoint/60/65529. Optional commands are only present when the matching feature is set in FeatureMap.


Bridge Command Payload Format

The bridge accepts Matter commands in this structure:

{
  "message_id": "1",
  "command": "device_command",
  "args": {
    "endpoint_id": 0,
    "cluster_id": 60,
    "command_name": "OpenCommissioningWindow",
    "payload": {},
    "timed_request_timeout_ms": 1000
  }
}

For Cluster 60, always use "cluster_id": 60. Payload keys are the command field names in lowerCamelCase. Octet-string fields are base64-encoded. timed_request_timeout_ms is required for timed commands and ignored otherwise.


Command: OpenCommissioningWindow

Purpose

This command is used by a current Administrator to instruct a Node to go into commissioning mode. The Enhanced Commissioning Method specifies a window of time during which an already commissioned Node accepts PASE sessions. The current Administrator specifies a timeout value for the duration of the OpenCommissioningWindow command. When the OpenCommissioningWindow command expires or commissioning completes, the Node must remove the Passcode by deleting the PAKE passcode verifier as well as stop publishing the DNS-SD record corresponding to this command.

Command Identity

FieldValue
Command ID0
Command hex0x00
Command nameOpenCommissioningWindow
Directionclient → server
ConformanceM
Responsestatus
Access(invoke: admin, timed)

Payload Fields

IDFieldPayload keyTypeConformanceConstraintMeaning
0CommissioningTimeoutcommissioningTimeoutuint16MdescThis field specifies the time in seconds during which commissioning session establishment is allowed by the Node.
1PAKEPasscodeVerifierpakePasscodeVerifieroctstrMallowed: 97—
2Discriminatordiscriminatoruint16M0 to 4095This field is used by the Node as the long discriminator for DNS-SD advertisement") for discovery by the new Administrator.
3Iterationsiterationsuint32M1000 to 100000—
4SaltsaltoctstrMlength 16 to 32When the command is received by a ICD, it must enter into active mode. The ICD must remain in Active Mode as long as one of these conditions is met: - A commissioning window is open. - There is an armed fail-safe timer.

Bridge Command Example

{
  "message_id": "1",
  "command": "device_command",
  "args": {
    "endpoint_id": 0,
    "cluster_id": 60,
    "command_name": "OpenCommissioningWindow",
    "payload": {
      "commissioningTimeout": 0,
      "pakePasscodeVerifier": "AQID",
      "discriminator": 0,
      "iterations": 1000,
      "salt": "AQID"
    },
    "timed_request_timeout_ms": 1000
  }
}

This is a timed command: the bridge must send it inside a timed interaction, so timed_request_timeout_ms is required.


Command: OpenBasicCommissioningWindow

Purpose

This command may be used by a current Administrator to instruct a Node to go into commissioning mode, if the node supports the Basic Commissioning Method. The Basic Commissioning Method specifies a window of time during which an already commissioned Node accepts PASE sessions. The current Administrator specifies a timeout value for the duration of the OpenBasicCommissioningWindow command. If a commissioning window is already currently open, this command must fail with a cluster specific status code of Busy.

Command Identity

FieldValue
Command ID1
Command hex0x01
Command nameOpenBasicCommissioningWindow
Directionclient → server
ConformanceBC
Responsestatus
Access(invoke: admin, timed)

Payload Fields

IDFieldPayload keyTypeConformanceConstraintMeaning
0CommissioningTimeoutcommissioningTimeoutuint16MdescThis field specifies the time in seconds during which commissioning session establishment is allowed by the Node. When the command is received by a ICD, it must enter into active mode.

Bridge Command Example

{
  "message_id": "1",
  "command": "device_command",
  "args": {
    "endpoint_id": 0,
    "cluster_id": 60,
    "command_name": "OpenBasicCommissioningWindow",
    "payload": {
      "commissioningTimeout": 0
    },
    "timed_request_timeout_ms": 1000
  }
}

This is a timed command: the bridge must send it inside a timed interaction, so timed_request_timeout_ms is required.


Command: RevokeCommissioning

Purpose

This is an idempotent command.

Command Identity

FieldValue
Command ID2
Command hex0x02
Command nameRevokeCommissioning
Directionclient → server
ConformanceM
Responsestatus
Access(invoke: admin, timed)

Payload Fields

This command has no payload fields.

Bridge Command Example

{
  "message_id": "1",
  "command": "device_command",
  "args": {
    "endpoint_id": 0,
    "cluster_id": 60,
    "command_name": "RevokeCommissioning",
    "payload": {},
    "timed_request_timeout_ms": 1000
  }
}

This is a timed command: the bridge must send it inside a timed interaction, so timed_request_timeout_ms is required.


Cluster 60 Events

Cluster 60 defines no events.


SmartphoneKey Notes

  • Cluster 60 is present on SmartphoneKey devices or hubs today. See Matter Bridge Clusters — Detailed Reference and Matter Device Attributes & Commands for the values the bridge actually reports.
  • Shadow paths follow endpoint/60/attribute; attribute values that the device reports as unreadable are written as n/a.
  • Attribute IDs, command IDs and enum values on this page come from the CSA Matter 1.6.1 data model; descriptions are condensed from the specification text.