Input to the OperationalCredentials removeFabric command

MatterSpecification.v13.Core § 11.18.6.12

interface RemoveFabricRequest {
    fabricIndex: FabricIndex;
}

Hierarchy (view full)

Properties

Properties

fabricIndex: FabricIndex

This field shall contain the Fabric Index reference (see fabric-index) associated with the Fabric which is to be removed from the device.

Effect on Receipt

If the FabricIndex field does not match the FabricIndex of any entry within the Fabrics list, then an NOCResponse with a StatusCode of InvalidFabricIndex shall be returned for the command and there shall NOT be any permanent changes to any device data.

Otherwise, one of the following outcomes shall occur:

  1. If the FabricIndex matches the last remaining entry in the Fabrics list, then the device shall delete all Matter related data on the node which was created since it was commissioned. This

includes all Fabric-Scoped data, including Access Control List, bindings, scenes, group keys, operational certificates, etc. All Trusted Roots shall also be removed. If a time synchronization cluster is present on the Node, the TrustedTimeSource and DefaultNtp shall be set to null. Any Matter related data including logs, secure sessions, exchanges and interaction model constructs shall also be removed. Since this operation involves the removal of the secure session data that may underpin the current set of exchanges, the Node invoking the command SHOULD NOT expect a response before terminating its secure session with the target.

  1. If the FabricIndex does not equal the accessing fabric index, then the device shall begin the process of irrevocably deleting all associated Fabric-Scoped data, including Access Control List, bindings, group keys, operational certificates, etc. Any remaining Trusted Roots no longer referenced by any operational certificate shall also be removed. If a time synchronization cluster is present on the Node, and the TrustedTimeSource FabricIndex matches the given FabricIndex, the TrustedTimeSource shall be set to null. All secure sessions, exchanges and interaction model constructs related to the Operational Identity under the given Fabric shall also be removed. Following the removal, an NOCResponse with a StatusCode of OK shall be returned.

  2. If the FabricIndex equals the accessing fabric index, then the device shall begin the process of irrevocably deleting all associated Fabric-Scoped data, including Access Control Entries, bindings, group keys, operational certificates, etc. Any remaining Trusted Roots no longer referenced by any operational certificate shall also be removed. If a time synchronization cluster is present on the Node, and the TrustedTimeSource FabricIndex matches the given FabricIndex, the TrustedTimeSource shall be set to null. All secure sessions, exchanges and interaction model constructs related to the Operational Identity under the given Fabric shall also be removed. Since this operation involves the removal of the secure session data that may underpin the current set of exchanges, the Node invoking the command SHOULD NOT expect a response before terminating its secure session with the target.

MatterSpecification.v13.Core § 11.18.6.12.1