| # Copyright (c) 2021 Project CHIP Authors |
| # |
| # Licensed under the Apache License, Version 2.0 (the "License"); |
| # you may not use this file except in compliance with the License. |
| # You may obtain a copy of the License at |
| # |
| # http://www.apache.org/licenses/LICENSE-2.0 |
| # |
| # Unless required by applicable law or agreed to in writing, software |
| # distributed under the License is distributed on an "AS IS" BASIS, |
| # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. |
| # See the License for the specific language governing permissions and |
| # limitations under the License. |
| |
| name: |
| 26.1.1. [TC-SC-5.1] Adding member to a group - TH as Admin and DUT as Group |
| Member |
| |
| PICS: |
| - GRPKEY.S |
| - G.S |
| |
| config: |
| nodeId: 0x12344321 |
| cluster: "Groups" |
| endpoint: 0 |
| |
| # Users should set endpoint value on the command line to PIXIT.G.ENDPOINT |
| Groups.Endpoint: 1 |
| |
| tests: |
| - label: "Step 0: Wait for the commissioned device to be retrieved" |
| cluster: "DelayCommands" |
| command: "WaitForCommissionee" |
| arguments: |
| values: |
| - name: "nodeId" |
| value: nodeId |
| |
| - label: "Read the commissioner node ID" |
| cluster: "CommissionerCommands" |
| command: "GetCommissionerNodeId" |
| response: |
| values: |
| - name: "nodeId" |
| saveAs: commissionerNodeId |
| |
| - label: |
| "Step 1: TH writes the ACL attribute in the Access Control cluster to |
| add Operate privileges for group 0x0103 and maintain the current |
| administrative privileges for the TH. The following access control |
| list shall be used : List item 1 (TH admin): a)Privilege: Administer |
| (5) b)AuthMode: CASE (2) c)Subjects: TH node id ([N1]) d)Targets: all |
| (null) List item 2 (group operate access): a)Privilege: Operate (3) |
| b)AuthMode: Group (3) c)Subjects: group 0x0103 ([0x0103]) d)Targets: |
| all (null)" |
| cluster: "Access Control" |
| command: "writeAttribute" |
| attribute: "ACL" |
| arguments: |
| value: |
| [ |
| { |
| FabricIndex: 1, |
| Privilege: 5, |
| AuthMode: 2, |
| Subjects: [commissionerNodeId], |
| Targets: null, |
| }, |
| { |
| FabricIndex: 1, |
| Privilege: 3, |
| AuthMode: 3, |
| Subjects: [0x0103], |
| Targets: null, |
| }, |
| ] |
| |
| - label: |
| "Step 2a: TH sends KeySetWrite command in the GroupKeyManagement |
| cluster to DUT using a key that is NOT installed on the TH. This is |
| intended to test that the key set is correctly updated in the next |
| step. GroupKeySet fields are as follows : 1)GroupKeySetID: 0x01a3 |
| 2)GroupKeySecurityPolicy: TrustFirst (0) 3)EpochKey0: |
| 00000000000000000000000000000001 4)EpochStartTime0: 111 5)EpochKey1: |
| 00000000000000000000000000000002 6)EpochStartTime1: 222 7)EpochKey2: |
| 00000000000000000000000000000003 8)EpochStartTime2: 333" |
| PICS: GRPKEY.S.C00.Rsp |
| cluster: "Group Key Management" |
| command: "KeySetWrite" |
| arguments: |
| values: |
| - name: GroupKeySet |
| value: |
| { |
| GroupKeySetID: 0x01a3, |
| GroupKeySecurityPolicy: 0, |
| EpochKey0: "hex:00000000000000000000000000000001", |
| EpochStartTime0: 111, |
| EpochKey1: "hex:00000000000000000000000000000002", |
| EpochStartTime1: 222, |
| EpochKey2: "hex:00000000000000000000000000000003", |
| EpochStartTime2: 333, |
| } |
| |
| - label: |
| "Step 2b: TH sends KeySetWrite command in the GroupKeyManagement |
| cluster to DUT using a key that is pre-installed on the TH. |
| GroupKeySet fields are as follows : 1)GroupKeySetID: 0x01a3 |
| 2)GroupKeySecurityPolicy: TrustFirst (0) 3)EpochKey0: |
| d0d1d2d3d4d5d6d7d8d9dadbdcdddedf 4)EpochStartTime0: 1 5)EpochKey1: |
| d1d1d2d3d4d5d6d7d8d9dadbdcdddedf 6)EpochStartTime1: |
| 18446744073709551613 7)EpochKey2: d2d1d2d3d4d5d6d7d8d9dadbdcdddedf |
| 8)EpochStartTime2: 18446744073709551614" |
| PICS: GRPKEY.S.C00.Rsp |
| cluster: "Group Key Management" |
| command: "KeySetWrite" |
| arguments: |
| values: |
| - name: GroupKeySet |
| value: |
| { |
| GroupKeySetID: 0x01a3, |
| GroupKeySecurityPolicy: 0, |
| EpochKey0: "hex:d0d1d2d3d4d5d6d7d8d9dadbdcdddedf", |
| EpochStartTime0: 1, |
| EpochKey1: "hex:d1d1d2d3d4d5d6d7d8d9dadbdcdddedf", |
| EpochStartTime1: 18446744073709551613, |
| EpochKey2: "hex:d2d1d2d3d4d5d6d7d8d9dadbdcdddedf", |
| EpochStartTime2: 18446744073709551614, |
| } |
| |
| - label: |
| "Step 3: TH binds GroupId 0x0103 with GroupKeySetID 0x01a3 in the |
| GroupKeyMap attribute list on GroupKeyManagement cluster by writing |
| the GroupKeyMap attribute with one entry as follows: List item 1: |
| 1)GroupId: 0x0103 2)GroupKeySetId: 0x01a3" |
| PICS: GRPKEY.S.A0000 |
| cluster: "Group Key Management" |
| command: "writeAttribute" |
| attribute: "GroupKeyMap" |
| arguments: |
| value: [{ FabricIndex: 1, GroupId: 0x0103, GroupKeySetID: 0x01a3 }] |
| |
| - label: |
| "Step 4: TH sends RemoveAllGroups command to the DUT on |
| PIXIT.G.ENDPOINT " |
| PICS: G.S.C04.Rsp |
| endpoint: Groups.Endpoint |
| command: "RemoveAllGroups" |
| |
| - label: |
| "Step 5: TH sends AddGroup Command to DUT on PIXIT.G.ENDPOINT with the |
| the following settings 1)GroupID: 0x0103 2)GroupName: 'Test Group'" |
| PICS: G.S.C00.Rsp |
| endpoint: Groups.Endpoint |
| command: "AddGroup" |
| arguments: |
| values: |
| - name: GroupID |
| value: 0x0103 |
| - name: GroupName |
| value: "Test Group" |
| |
| - label: |
| "Step 6a: TH sends ViewGroup command with the GroupID to the Group |
| cluster on the DUT on PIXIT.G.ENDPOINT" |
| PICS: G.S.F00 && G.S.C01.Rsp |
| endpoint: Groups.Endpoint |
| command: "ViewGroup" |
| arguments: |
| values: |
| - name: GroupID |
| value: 0x0103 |
| response: |
| values: |
| - name: Status |
| value: 0 |
| - name: GroupID |
| value: 0x0103 |
| - name: GroupName |
| value: "Test Group" |
| |
| - label: |
| "Step 6b: TH sends ViewGroup command with the GroupID to the Group |
| cluster on the DUT on PIXIT.G.ENDPOINT" |
| PICS: " !G.S.F00 && G.S.C01.Rsp " |
| endpoint: Groups.Endpoint |
| command: "ViewGroup" |
| arguments: |
| values: |
| - name: GroupID |
| value: 0x0103 |
| response: |
| values: |
| - name: Status |
| value: 0 |
| - name: GroupID |
| value: 0x0103 |
| - name: GroupName |
| value: "" |
| |
| - label: |
| "Step 7: TH sends KeySetRead command to GroupKeyManagement cluster |
| with GroupKeySetID as 0x01a3" |
| PICS: GRPKEY.S.C01.Rsp |
| cluster: "Group Key Management" |
| command: "KeySetRead" |
| arguments: |
| values: |
| - name: GroupKeySetID |
| value: 0x01a3 |
| response: |
| values: |
| - name: GroupKeySet |
| value: |
| { |
| GroupKeySetID: 0x01a3, |
| GroupKeySecurityPolicy: 0, |
| EpochKey0: null, |
| EpochStartTime0: 1, |
| EpochKey1: null, |
| EpochStartTime1: 18446744073709551613, |
| EpochKey2: null, |
| EpochStartTime2: 18446744073709551614, |
| } |
| |
| - label: |
| "Step 8: TH reads GroupKeyMap Attribute from the GroupKeyManagement |
| cluster from DUT" |
| PICS: GRPKEY.S.A0000 |
| cluster: "Group Key Management" |
| command: "readAttribute" |
| attribute: "GroupKeyMap" |
| response: |
| value: [{ FabricIndex: 1, GroupId: 0x0103, GroupKeySetID: 0x01a3 }] |
| |
| - label: |
| "Step 9a: TH reads GroupTable attribute from GroupKeyManagement |
| cluster on DUT using a fabric-filtered read." |
| cluster: "Group Key Management" |
| PICS: G.S.F00 && GRPKEY.S.A0001 |
| command: "readAttribute" |
| attribute: "GroupTable" |
| response: |
| value: |
| [ |
| { |
| GroupId: 0x0103, |
| Endpoints: [Groups.Endpoint], |
| GroupName: "Test Group", |
| }, |
| ] |
| |
| - label: |
| "Step 9b: TH reads GroupTable attribute from GroupKeyManagement |
| cluster on DUT using a fabric-filtered read" |
| cluster: "Group Key Management" |
| PICS: " !G.S.F00 && GRPKEY.S.A0001 " |
| command: "readAttribute" |
| attribute: "GroupTable" |
| response: |
| value: |
| [{ GroupId: 0x0103, Endpoints: [Groups.Endpoint], GroupName: "" }] |
| |
| - label: |
| "Step 10: TH removes the Group key set that was added by sending a |
| KeySetRemove command to the GroupKeyManagement cluster with the |
| GroupKeySetID field set to 0x01a3" |
| PICS: GRPKEY.S.C03.Rsp |
| cluster: "Group Key Management" |
| command: "KeySetRemove" |
| arguments: |
| values: |
| - name: GroupKeySetID |
| value: 0x01a3 |
| |
| - label: |
| "Step 11: TH verifies that the key set removal in step 10 also removed |
| the corresponding entries in the GroupKeyMap by Reading the |
| GroupKeyMap attribute from the GroupKeyManagement cluster using a |
| fabric-filtered read." |
| PICS: GRPKEY.S.A0000 |
| cluster: "Group Key Management" |
| command: "readAttribute" |
| attribute: "GroupKeyMap" |
| response: |
| value: [] |
| |
| - label: |
| "Step 12: TH cleans up groups using RemoveAllGroups command to the DUT |
| on PIXIT.G.ENDPOINT" |
| PICS: G.S.C04.Rsp |
| endpoint: Groups.Endpoint |
| command: "RemoveAllGroups" |
| |
| - label: |
| "Step 13: TH reads verifies the group has been removed by reading the |
| GroupTable attribute from GroupKeyManagement cluster on DUT using a |
| fabric-filtered read." |
| PICS: GRPKEY.S.A0001 |
| cluster: "Group Key Management" |
| command: "readAttribute" |
| attribute: "GroupTable" |
| response: |
| value: [] |
| |
| - label: |
| "Step 14: TH writes the ACL attribute in the Access Control cluster to |
| remove Operate privileges for group 0x0103 and maintain the current |
| administrative privileges for the TH. The following access control |
| list shall be used: List item 1 (TH admin): 1)Privilege: Administer |
| (5) 2)AuthMode: CASE (2) 3)Subjects: TH node id ([N1]) 4)Targets: all |
| (null)" |
| cluster: "Access Control" |
| command: "writeAttribute" |
| attribute: "ACL" |
| arguments: |
| value: |
| [ |
| { |
| FabricIndex: 1, |
| Privilege: 5, |
| AuthMode: 2, |
| Subjects: [commissionerNodeId], |
| Targets: null, |
| }, |
| ] |
